Published: 18/07/2018 Updated: 03/10/2019

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Fusion Middleware Mapviewer

Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder). Supported versions that are affected are 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Fusion Middleware MapViewer. Successful attacks of this vulnerability can result in takeover of Oracle Fusion Middleware MapViewer. CVSS 3.0 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle fusion middleware mapviewer 12.2.1.3.0
oracle fusion middleware mapviewer 12.2.1.2.0

So long and thanks for all the fixes: ERPScan left out of credits on Oracle bug-bash list

The Register • John Leyden • 18 Jul 2018

App security firm sanctioned in US over ties with Russia US tech companies sucked into Russian sanctions row Sir, you've been using Kaspersky Lab antivirus. Please come with us, sir

Oracle fixed 17 flaws in its products found by ERPScan researchers without acknowledging the application security firm, which was recently and controversially sanctioned in the US. ERPScan said vulnerabilities it uncovered affect six different business applications. Left unpatched, they potentially allow attackers access to sensitive business data. The bugs range from remote code execution and cross-site scripting to authentication bypass and memory corruption. The flaws spotted by ERPScan are a...

CVE-2018-2943

Vulnerability Summary

Recent Articles

References

Vulmon Search

About

Products

Connect