CVE-2018-2904: Medium severity oracle communications eagle vulnerability
Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications (subcomponent: GUI). The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications EAGLE LNP Application Processor. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications EAGLE LNP Application Processor accessible data as well as unauthorized read access to a subset of Oracle Communications EAGLE LNP Application Processor accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-2904?
CVE-2018-2904 is classified as an easily exploitable vulnerability that allows unauthenticated attackers to compromise affected systems.
How do I fix CVE-2018-2904?
To remediate CVE-2018-2904, users should upgrade to the latest version of Oracle Communications EAGLE LNP Application Processor.
What versions are affected by CVE-2018-2904?
CVE-2018-2904 affects Oracle Communications EAGLE LNP Application Processor versions 10.0 and 10.1.
Can CVE-2018-2904 be exploited remotely?
Yes, CVE-2018-2904 can be exploited remotely by attackers with network access through HTTP.
What component is primarily affected by CVE-2018-2904?
CVE-2018-2904 primarily affects the GUI component of the Oracle Communications EAGLE LNP Application Processor.