VDB
BDU%3A2018-00935
BDU%3A2018-00935
PUBLISHED
CVSS 7.5 HIGH
Уязвимость модуля spring-messaging программной платформы Spring Framework, позволяющая нарушителю получить полный контроль над приложением
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Pivotal Software Inc., АО «Концерн ВНИИНС» | WebLogic Server, Enterprise Manager Ops Center, Application Testing Suite, Financial Services Analytical Applications Infrastructure, Financial Services Behavior Detection Platform, Enterprise Repository, Insurance Policy Administration, PeopleSoft Enterprise FIN Install, Retail Back Office, Retail Central Office, Retail Returns Management, Retail Point-of-Service, Spring Framework, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) |
Timeline
- Aug 3, 2018 CVE Published
- Nov 21, 2023 CVE Updated
References
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html url
- https://www.securitylab.ru/vulnerability/492891.php url
- https://www.cybersecurity-help.cz/vdb/SB2018042408 url
- https://pivotal.io/security/cve-2018-1275 url
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url