CVE-2018-2904
First published: Wed Jul 18 2018(Updated: )
Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications (subcomponent: GUI). The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications EAGLE LNP Application Processor. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications EAGLE LNP Application Processor accessible data as well as unauthorized read access to a subset of Oracle Communications EAGLE LNP Application Processor accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Communications EAGLE local number portability Application Processor | =10.0 | |
| Oracle Communications EAGLE local number portability Application Processor | =10.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-2904?
CVE-2018-2904 is classified as an easily exploitable vulnerability that allows unauthenticated attackers to compromise affected systems.
How do I fix CVE-2018-2904?
To remediate CVE-2018-2904, users should upgrade to the latest version of Oracle Communications EAGLE LNP Application Processor.
What versions are affected by CVE-2018-2904?
CVE-2018-2904 affects Oracle Communications EAGLE LNP Application Processor versions 10.0 and 10.1.
Can CVE-2018-2904 be exploited remotely?
Yes, CVE-2018-2904 can be exploited remotely by attackers with network access through HTTP.
What component is primarily affected by CVE-2018-2904?
CVE-2018-2904 primarily affects the GUI component of the Oracle Communications EAGLE LNP Application Processor.
- agent/type
- agent/severity
- agent/author
- agent/remedy
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle communications eagle local number portability application processor
- version/oracle communications eagle local number portability application processor/10.0
- version/oracle communications eagle local number portability application processor/10.1