CVE-2018-2879 is a critical vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware, specifically affecting versions 11.1.2.3.0 and 12.2.1.3.0. This unauthenticated vulnerability, exploitable via HTTP network access, allows for a complete takeover of Oracle Access Manager, with potential significant impact on additional products. Despite its high CVSS v3.0 base score of 9.0 (CRITICAL) and high FAUCET Risk Score of 97/100, indicating severe confidentiality, integrity, and availability impacts, the attack complexity is high. There is no public exploit intelligence available (Metasploit, Nuclei, ExploitDB), and it has received no community discussion or media coverage, suggesting a lack of widespread active exploitation or public awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
11.1.2.3.0CPE matchmatch criteria | cpe:2.3:a:oracle:access_manager:11.1.2.3.0:*:*:*:*:*:*:* | ||
12.2.1.3.0CPE matchmatch criteria | cpe:2.3:a:oracle:access_manager:12.2.1.3.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.4 Reddit, 1.1 Bluesky, 0.8 Mastodon, and 2.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.8 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.