2018-01-18 - CVE Archive

CVE-2018-2675 Jan 18, 02:29 LOW PATCH Monitor

Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Java Advanced Management Console

NVD

CVSS 3.0

3.7

EPSS

1.9%

CVE-2018-2579 Jan 18, 02:29 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Debian Oracle Red Hat +19

NVD

CVSS 3.1

3.7

EPSS

4.1%

CVE-2018-0106 Jan 18, 06:29 LOW Monitor

A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local attacker to access sensitive information on a targeted system. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Cisco Elastic Elastic Services Controller

NVD

CVSS 3.1

3.3

EPSS

0.3%

CVE-2018-0109 Jan 18, 06:29 LOW Monitor

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access sensitive data about the application. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Cisco Webex Meetings Server

NVD

CVSS 3.0

2.7

EPSS

1.2%

CVE-2018-2575 Jan 18, 02:29 LOW PATCH Monitor

Vulnerability in the Core RDBMS component of Oracle Database Server. Rated low severity (CVSS 2.0), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Oracle Database Server

NVD

CVSS 3.0

2.0

EPSS

0.9%