CVE-2018-2938

🗓️ 18 Jul 2018 13:00:00Reported by oracleType

Vulnerability in Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions 6u191, 7u181, and 8u172. Difficult to exploit, unauthenticated network access vulnerability can result in takeover of Java SE. CVE-2018-2938 addresses CVE-2018-1313. CVSS 3.0 Base Score 9.

Reporter	Title	Published	Views	Family All 104
IBM Security Bulletins	Security Bulletin: A denial-of-service attack, heap use after free, network server exploit, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	8 Jul 202517:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites affect IBM Engineering products.	26 Feb 202120:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for June 2024 - Multiple CVEs addressed	7 Aug 202405:53	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Derby security vulnerabilities in IBM System Dashboard for Enterprise Content Manager (affected, not vulnerable)	26 Jul 202223:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Open Source software used by Cloud Pak System	31 Mar 202314:10	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Derby as used by IBM QRadar SIEM is vulnerable to Improper Input Validation (CVE-2018-1313)	13 Oct 202019:34	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Derby could affect IBM Performance Management products (CVE-2018-1313)	29 Aug 201815:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Derby affect IBM Operations Analytics - Log Analysis (CVE-2018-1313)	2 Nov 202216:45	–	ibm
IBM Security Bulletins	Security Bulletin: ITCAM for Transactions affected by the Security vulnerability CVE-2018-1313 found in derbyclient-10.10.2.0.jar and its perivious versions	30 Aug 202311:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is affected by an Apache Derby vulnerability (CVE-2018-1313)	4 Oct 201804:15	–	ibm

NVD

Node

oracle jdkMatch1.6.0update191

oracle jdkMatch1.7.0update181

oracle jdkMatch1.8.0update172

oracle jreMatch1.6.0update191

oracle jreMatch1.7.0update181

oracle jreMatch1.8.0update172

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

netapp cloud_backupMatch-

netapp e-series_santricity_os_controllerRange11.0–11.70.1

netapp e-series_santricity_storage_managerMatch-

netapp oncommand_insightMatch-

netapp oncommand_unified_managerMatch-

netapp oncommand_workflow_automationMatch-

netapp plug-in_for_symantec_netbackupMatch-

netapp snapmanagerMatch-oracle

netapp snapmanagerMatch-sap

netapp steelstore_cloud_integrated_storageMatch-

netapp storage_replication_adapter_for_clustered_data_ontapRange9.7≥vmware_vsphere

netapp vasa_provider_for_clustered_data_ontapRange9.7≥

netapp virtual_storage_consoleRange9.7≥vmware_vsphere

[
  {
    "product": "Java",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Java SE: 6u191"
      },
      {
        "status": "affected",
        "version": "7u181"
      },
      {
        "status": "affected",
        "version": "8u172"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
securityfocus	www.securityfocus.com/bid/104774
securitytracker	www.securitytracker.com/id/1041302
security	www.security.netapp.com/advisory/ntap-20180726-0001/

17 Jun 2026 01:56Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26.8

CVSS 3.19

EPSS0.04504

SSVC