CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-8013

In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.014

EPSS Ranking 79.5%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2018-8013

Apache » Batik » Version: 1.0

cpe:2.3:a:apache:batik:1.0
Apache » Batik » Version: 1.1

cpe:2.3:a:apache:batik:1.1
Apache » Batik » Version: 1.1.1

cpe:2.3:a:apache:batik:1.1.1
Apache » Batik » Version: 1.5

cpe:2.3:a:apache:batik:1.5
Apache » Batik » Version: 1.5.1

cpe:2.3:a:apache:batik:1.5.1
Apache » Batik » Version: 1.6

cpe:2.3:a:apache:batik:1.6
Apache » Batik » Version: 1.6.1

cpe:2.3:a:apache:batik:1.6.1
Apache » Batik » Version: 1.7

cpe:2.3:a:apache:batik:1.7
Apache » Batik » Version: 1.7.1

cpe:2.3:a:apache:batik:1.7.1
Apache » Batik » Version: 1.8

cpe:2.3:a:apache:batik:1.8
Apache » Batik » Version: 1.9

cpe:2.3:a:apache:batik:1.9
Apache » Batik » Version: 1.9.1

cpe:2.3:a:apache:batik:1.9.1
Oracle » Business Intelligence » Version: 11.1.1.7.0

cpe:2.3:a:oracle:business_intelligence:11.1.1.7.0
Oracle » Business Intelligence » Version: 11.1.1.9.0

cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0
Oracle » Business Intelligence » Version: 12.2.1.3.0

cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0
Oracle » Business Intelligence » Version: 12.2.1.4.0

cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0
Oracle » Communications Diameter Signaling Router » Version: N/A

cpe:2.3:a:oracle:communications_diameter_signaling_router:-
Oracle » Communications Diameter Signaling Router » Version: 6.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:6.0
Oracle » Communications Diameter Signaling Router » Version: 8.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0
Oracle » Communications Diameter Signaling Router » Version: 8.0.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0
Oracle » Communications Diameter Signaling Router » Version: 8.0.0.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0.0
Oracle » Communications Diameter Signaling Router » Version: 8.1

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1
Oracle » Communications Diameter Signaling Router » Version: 8.2

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2
Oracle » Communications Diameter Signaling Router » Version: 8.2.1

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1
Oracle » Communications Diameter Signaling Router » Version: 8.2.2

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.2
Oracle » Communications Metasolv Solution » Version: 6.3.0

cpe:2.3:a:oracle:communications_metasolv_solution:6.3.0
Oracle » Communications Webrtc Session Controller » Version: 7.0

cpe:2.3:a:oracle:communications_webrtc_session_controller:7.0
Oracle » Communications Webrtc Session Controller » Version: 7.1

cpe:2.3:a:oracle:communications_webrtc_session_controller:7.1
Oracle » Data Integrator » Version: 12.2.1.3.0

cpe:2.3:a:oracle:data_integrator:12.2.1.3.0
Oracle » Enterprise Repository » Version: 11.1.1.7.0

cpe:2.3:a:oracle:enterprise_repository:11.1.1.7.0
Oracle » Enterprise Repository » Version: 12.1.3.0.0

cpe:2.3:a:oracle:enterprise_repository:12.1.3.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 7.3.3.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:7.3.3.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 7.3.3.0.1

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:7.3.3.0.1
Oracle » Financial Services Analytical Applications Infrastructure » Version: 7.3.3.0.2

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:7.3.3.0.2
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.0.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.0.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.0.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.0.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.0.2.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.0.2.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.0.3.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.0.3.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.1.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.1.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.1.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.1.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.1.2.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.1.2.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.2

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.2
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.2.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.2.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.2.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.2.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.2.2.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.2.2.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.3

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.3
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.3.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.3.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.3.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.3.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.3.2.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.3.2.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.3.3.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.3.3.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.4

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.4
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.4.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.4.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.4.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.4.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.4.2.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.4.2.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.4.3.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.4.3.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.4.4.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.4.4.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.4.5.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.4.5.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.5

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.5
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.5.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.5.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.5.0.1

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.5.0.1
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.5.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.5.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.5.2.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.5.2.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.5.3.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.5.3.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.5.4.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.5.4.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.0.1

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.0.1
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.2.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.2.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.3.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.3.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.4.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.4.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.1.0
Oracle » Fusion Middleware Mapviewer » Version: 12.2.1.2

cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.2
Oracle » Fusion Middleware Mapviewer » Version: 12.2.1.3

cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3
Oracle » Instantis Enterprisetrack » Version: 17.1

cpe:2.3:a:oracle:instantis_enterprisetrack:17.1
Oracle » Instantis Enterprisetrack » Version: 17.2

cpe:2.3:a:oracle:instantis_enterprisetrack:17.2
Oracle » Instantis Enterprisetrack » Version: 17.3

cpe:2.3:a:oracle:instantis_enterprisetrack:17.3
Oracle » Insurance Calculation Engine » Version: 10.1.1

cpe:2.3:a:oracle:insurance_calculation_engine:10.1.1
Oracle » Insurance Calculation Engine » Version: 10.2.1

cpe:2.3:a:oracle:insurance_calculation_engine:10.2.1
Oracle » Insurance Policy Administration J2ee » Version: 10.0

cpe:2.3:a:oracle:insurance_policy_administration_j2ee:10.0
Oracle » Insurance Policy Administration J2ee » Version: 10.2

cpe:2.3:a:oracle:insurance_policy_administration_j2ee:10.2
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2
Oracle » Retail Back Office » Version: 13.3

cpe:2.3:a:oracle:retail_back_office:13.3
Oracle » Retail Back Office » Version: 13.4

cpe:2.3:a:oracle:retail_back_office:13.4
Oracle » Retail Back Office » Version: 14

cpe:2.3:a:oracle:retail_back_office:14
Oracle » Retail Back Office » Version: 14.1

cpe:2.3:a:oracle:retail_back_office:14.1
Oracle » Retail Central Office » Version: 14.1

cpe:2.3:a:oracle:retail_central_office:14.1
Oracle » Retail Integration Bus » Version: 17.0

cpe:2.3:a:oracle:retail_integration_bus:17.0
Oracle » Retail Order Broker » Version: 15.0

cpe:2.3:a:oracle:retail_order_broker:15.0
Oracle » Retail Order Broker » Version: 16.0

cpe:2.3:a:oracle:retail_order_broker:16.0
Oracle » Retail Order Broker » Version: 5.1

cpe:2.3:a:oracle:retail_order_broker:5.1
Oracle » Retail Order Broker » Version: 5.2

cpe:2.3:a:oracle:retail_order_broker:5.2
Oracle » Retail Point-Of-Service » Version: 13.4

cpe:2.3:a:oracle:retail_point-of-service:13.4
Oracle » Retail Point-Of-Service » Version: 14.0

cpe:2.3:a:oracle:retail_point-of-service:14.0
Oracle » Retail Point-Of-Service » Version: 14.1

cpe:2.3:a:oracle:retail_point-of-service:14.1
Oracle » Retail Returns Management » Version: 14.1

cpe:2.3:a:oracle:retail_returns_management:14.1
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-8013

Products

Pricing

Contact Us