CVE-2018-3004 is a medium-severity vulnerability affecting the Java VM component of Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, and 18.2. A low-privileged attacker with Create Session and Create Procedure privileges and network access can exploit this difficult-to-exploit flaw. Successful exploitation can lead to unauthorized access to critical data or complete access to all Java VM accessible data, resulting in a CVSS 3.0 Base Score of 5.3 for confidentiality impact. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
11.2.0.4CPE matchmatch criteria | cpe:2.3:a:oracle:database_server:11.2.0.4:*:*:*:*:*:*:* | ||
12.1.0.2CPE matchmatch criteria | cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:* | ||
12.2.0.1CPE matchmatch criteria | cpe:2.3:a:oracle:database_server:12.2.0.1:*:*:*:*:*:*:* | ||
18.2CPE matchmatch criteria | cpe:2.3:a:oracle:database_server:18.2:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.