High severity8.8NVD Advisory· Published Jan 18, 2018· Updated Jun 17, 2026
CVE-2018-2615
CVE-2018-2615
Description
Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant). The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise OSS Support Tools. Successful attacks of this vulnerability can result in takeover of OSS Support Tools. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected products
2<2.11.33+ 1 more
- (no CPE)range: <2.11.33
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
2- www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/102640nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.