CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-2796

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 49.9%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2018-2796

Hp » Xp7 Command View » Version: N/A

cpe:2.3:a:hp:xp7_command_view:-
Hp » Xp7 Command View » Version: 8.4.0

cpe:2.3:a:hp:xp7_command_view:8.4.0
Hp » Xp7 Command View » Version: 8.4.1

cpe:2.3:a:hp:xp7_command_view:8.4.1
Hp » Xp7 Command View » Version: 8.6.2-01

cpe:2.3:a:hp:xp7_command_view:8.6.2-01
Hp » Xp7 Command View » Version: 8.6.3-00

cpe:2.3:a:hp:xp7_command_view:8.6.3-00
Hp » Xp7 Command View » Version: 8.6.4-00

cpe:2.3:a:hp:xp7_command_view:8.6.4-00
Hp » Xp7 Command View » Version: 8.6.5-00

cpe:2.3:a:hp:xp7_command_view:8.6.5-00
Hp » Xp7 Command View » Version: 8.7.0-00

cpe:2.3:a:hp:xp7_command_view:8.7.0-00
Oracle » Jdk » Version: 1.7.0

cpe:2.3:a:oracle:jdk:1.7.0
Oracle » Jdk » Version: 1.8.0

cpe:2.3:a:oracle:jdk:1.8.0
Oracle » Jdk » Version: 10

cpe:2.3:a:oracle:jdk:10
Oracle » Jre » Version: 1.7.0

cpe:2.3:a:oracle:jre:1.7.0
Oracle » Jre » Version: 1.8.0

cpe:2.3:a:oracle:jre:1.8.0
Oracle » Jre » Version: 10

cpe:2.3:a:oracle:jre:10
Oracle » Jrockit » Version: r28.3.17

cpe:2.3:a:oracle:jrockit:r28.3.17
Redhat » Satellite » Version: 5.6

cpe:2.3:a:redhat:satellite:5.6
Redhat » Satellite » Version: 5.7

cpe:2.3:a:redhat:satellite:5.7
Redhat » Satellite » Version: 5.8

cpe:2.3:a:redhat:satellite:5.8
Schneider-Electric » Struxureware Data Center Expert » Version: 7.3.1

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.3.1
Schneider-Electric » Struxureware Data Center Expert » Version: 7.4.0

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.0
Schneider-Electric » Struxureware Data Center Expert » Version: 7.4.1

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.1
Schneider-Electric » Struxureware Data Center Expert » Version: 7.4.2

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.2
Schneider-Electric » Struxureware Data Center Expert » Version: 7.4.3

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.3
Schneider-Electric » Struxureware Data Center Expert » Version: 7.5.0

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.5.0
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 17.10

cpe:2.3:o:canonical:ubuntu_linux:17.10
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
Redhat » Enterprise Linux Server Eus » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5
Redhat » Enterprise Linux Server Eus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6
Redhat » Enterprise Linux Server Tus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-2796

Products

Pricing

Contact Us