CVE-2018-2563

MEDIUM Year: 2018
CVSS v3 Score
4.2
Medium
CVSS v2 Score
4.9
Medium
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDAP Library). Supported versions that are affected are 10 and 11.3. Difficult to exploit vulnerability allows low privileged attacker with network access via LDAP to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data as well as unauthorized read access to a subset of Solaris accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).

Related Vulnerabilities

CVE-2017-0066

MEDIUM
CVSS:4.2(Medium)

Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is di...

NVD-CWE-Other2017

CVE-2017-0135

MEDIUM
CVSS:4.2(Medium)

Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is di...

NVD-CWE-Other2017

CVE-2017-0140

MEDIUM
CVSS:4.2(Medium)

Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is di...

NVD-CWE-Other2017

CVE-2017-13675

MEDIUM
CVSS:4.2(Medium)

A denial of service (DoS) attack in Symantec Endpoint Encryption before SEE 11.1.3HF2 allows remote attackers to make a particular machine or network resource unavailable to its intended users by temp...

NVD-CWE-Other2017

CVE-2017-13679

MEDIUM
CVSS:4.2(Medium)

A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attackers to make a particular machine or network resource unavailable to its intended users by t...

NVD-CWE-Other2017

CVE-2017-18808

MEDIUM
CVSS:4.2(Medium)

NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by incorrect configuration of security settings.

NVD-CWE-Other2017