vulnerability

Oracle WebLogic: CVE-2018-11058 : Critical Patch Update

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
2018-09-14
Added
2020-07-14
Modified
2024-11-27

Description

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would result in such issue.

Solution(s)

oracle-weblogic-jul-2020-cpu-10_3_6_0_0oracle-weblogic-jul-2020-cpu-12_1_3_0_0oracle-weblogic-jul-2020-cpu-12_2_1_3_0oracle-weblogic-jul-2020-cpu-12_2_1_4_0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.