CVE-2018-3305: Medium severity oracle application testing suite vulnerability
Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Web Apps). Supported versions that are affected are 12.5.0.3, 13.1.0.1, 13.2.0.1 and 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Testing Suite accessible data as well as unauthorized read access to a subset of Oracle Application Testing Suite accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Application Testing Suite. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3305?
The severity of CVE-2018-3305 is medium with a severity value of 6.3.
Which versions of Oracle Application Testing Suite are affected by CVE-2018-3305?
The versions 12.5.0.3, 13.1.0.1, 13.2.0.1, and 13.3.0.1 of Oracle Application Testing Suite are affected by CVE-2018-3305.
How can a low privileged attacker exploit CVE-2018-3305?
A low privileged attacker can easily exploit CVE-2018-3305.
How do I fix CVE-2018-3305?
To fix CVE-2018-3305, apply the patches provided by Oracle and update to a patched version of Oracle Application Testing Suite.
Where can I find more information about CVE-2018-3305?
You can find more information about CVE-2018-3305 on the Oracle website and the SecurityFocus website.