CVE-2018-10862

20

FAUCET Score

CVE-2018-10862 is a "Zip Slip" vulnerability affecting WildFly Core before version 6.0.0.Alpha3, as well as Red Hat Enterprise Linux, JBoss EAP, and Virtualization. It allows an authenticated local attacker to overwrite arbitrary files by crafting a malicious .war archive with invalid file paths. Rated Medium (CVSS 5.5), the vulnerability has low attack complexity and requires local user privileges, primarily impacting integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		4.0CPE matchmatch criteria	cpe:2.3:a:redhat:virtualization:4.0:::::::*
		7.1.0CPE matchmatch criteria	cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:::::::*
		<= 5.0.0CPE matchmatch criteria	cpe:2.3:a:redhat:wildfly_core::::::::
		6.0.0CPE matchmatch criteria	cpe:2.3:a:redhat:wildfly_core:6.0.0:alpha1::::::
		6.0.0CPE matchmatch criteria	cpe:2.3:a:redhat:wildfly_core:6.0.0:alpha2::::::

CVSS Data

CVSS version used by this source: 3.0

5.5MEDIUM

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

Exploitability Score

1.8

Impact Score

3.6

CvssVersion

3.0

Exploit Intelligence

EPSS Score

1.26%

Probability of exploitation in next 30 days

EPSS Percentile

66.6%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0126 is in the 97th percentile among its peer group of 15,938 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (61)

mavenpatch availablevia ghsa

Product: org.wildfly.core:wildfly-serverFixed in: 6.0.0.Alpha3

redhatpatch availablevia redhat_api

Product: Red Hat JBoss EAP 7.1Fixed in: wildfly

redhatpatch availablevia redhat_api

Product: Text-Only RHOAR

redhatpatch availablevia redhat_api

Product: Red Hat Single Sign-On 7.2.4 zipFixed in: wildfly

redhatpatch availablevia redhat_api

Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Fixed in: rhvm-appliance-0:4.2-20180828.0.el7

redhatpatch availablevia redhat_api

Product: Red Hat Data Grid 7.3.6Fixed in: wildfly

redhatpatch availablevia redhat_api

Product: Red Hat JBoss EAP 7.1

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-apache-cxf-0:3.1.16-1.redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-wildfly-0:7.1.3-4.GA_redhat_3.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-wss4j-0:2.1.12-1.redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-xml-security-0:2.0.10-1.redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-activemq-artemis-0:1.5.5.013-1.redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-bouncycastle-0:1.56.0-5.redhat_3.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-guava-libraries-0:25.0.0-1.redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-hibernate-0:5.1.15-1.Final_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-ironjacamar-0:1.4.10-1.Final_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-jberet-0:1.2.6-2.Final_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-jboss-ejb-client-0:4.0.11-1.Final_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-jboss-remoting-0:5.0.8-1.Final_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-jboss-server-migration-0:1.0.6-4.Final_redhat_4.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-mod_cluster-0:1.3.10-1.Final_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-narayana-0:5.5.32-1.Final_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-picketlink-bindings-0:2.5.5-13.SP12_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-picketlink-federation-0:2.5.5-13.SP12_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-resteasy-0:3.0.26-1.Final_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-undertow-0:1.4.18-7.SP8_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-wildfly-0:7.1.4-1.GA_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-wildfly-javadocs-0:7.1.4-2.GA_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-wildfly-naming-client-0:1.0.9-1.Final_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-wildfly-openssl-linux-0:1.0.6-14.Final_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-wildfly-transaction-client-0:1.0.4-1.Final_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6Fixed in: eap7-wildfly-web-console-eap-0:2.9.18-1.Final_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-apache-cxf-0:3.1.16-1.redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-wildfly-0:7.1.3-4.GA_redhat_3.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-wss4j-0:2.1.12-1.redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-xml-security-0:2.0.10-1.redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-activemq-artemis-0:1.5.5.013-1.redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-bouncycastle-0:1.56.0-5.redhat_3.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-guava-libraries-0:25.0.0-1.redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-hibernate-0:5.1.15-1.Final_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-ironjacamar-0:1.4.10-1.Final_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-jberet-0:1.2.6-2.Final_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-jboss-ejb-client-0:4.0.11-1.Final_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-jboss-remoting-0:5.0.8-1.Final_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-jboss-server-migration-0:1.0.6-4.Final_redhat_4.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-mod_cluster-0:1.3.10-1.Final_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-narayana-0:5.5.32-1.Final_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-picketlink-bindings-0:2.5.5-13.SP12_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-picketlink-federation-0:2.5.5-13.SP12_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-resteasy-0:3.0.26-1.Final_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-undertow-0:1.4.18-7.SP8_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-wildfly-0:7.1.4-1.GA_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-wildfly-javadocs-0:7.1.4-2.GA_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-wildfly-naming-client-0:1.0.9-1.Final_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-wildfly-openssl-linux-0:1.0.6-14.Final_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-wildfly-transaction-client-0:1.0.4-1.Final_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7Fixed in: eap7-wildfly-web-console-eap-0:2.9.18-1.Final_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform Continuous DeliveryFixed in: wildfly

redhatpatch availablevia redhat_api

Product: Red Hat Single Sign-On 7.2Fixed in: wildfly

redhatvendor investigatingvia nvd_reference

redhatno patchvia redhat_api

Product: Red Hat OpenShift Application RuntimesFixed in: wildfly

Vendor Advisories (2)

mavenGHSA-w8r2-5j8x-x8j6medium

Improper Limitation of a Pathname to a Restricted Directory in WildFly

redhatCVE-2018-10862Important

wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)

References

access.redhat.com / errata/RHSA-2018:2276

Vendor Advisory

access.redhat.com / errata/RHSA-2018:2277

Vendor Advisory

access.redhat.com / errata/RHSA-2018:2279

Vendor Advisory

access.redhat.com / errata/RHSA-2018:2423

Vendor Advisory

access.redhat.com / errata/RHSA-2018:2424

Vendor Advisory

access.redhat.com / errata/RHSA-2018:2425

Vendor Advisory

access.redhat.com / errata/RHSA-2018:2428

Vendor Advisory

access.redhat.com / errata/RHSA-2018:2643

Vendor Advisory

access.redhat.com / errata/RHSA-2019:0877

Vendor Advisory

bugzilla.redhat.com / show_bug.cgi

Issue TrackingVendor Advisory

snyk.io / research/zip-slip-vulnerability

Third Party Advisory