9 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
74.8%
07/16/2018
Critical
Multiple serious vulnerabilities were found in Oracle Java SE, Java SE Embedded and JRockit. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, cause denial of service.
Java SE 6u191 and earlier
Java SE 7u181 and earlier
Java SE 8u172 and earlier
Java SE 10.0.1 and earlier
Java SE Embedded 8u171 and earlier
JRockit R28.3.18 and earlier
Update to the latest version
Oracle software downloads
Oracle Critical Patch Update Advisory – July 2018
OSI
CVE-2018-29386.8High
CVE-2018-29645.1High
CVE-2018-29415.1High
CVE-2018-29425.1High
CVE-2018-29724.3Warning
CVE-2018-29734.3Warning
CVE-2018-29404.3Warning
CVE-2018-29524.3Warning
www.oracle.com/technetwork/indexes/downloads/index.html
www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2938
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2940
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2941
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2942
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2952
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2964
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2972
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2973
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Oracle-Java-JRE-1.10.x/
threats.kaspersky.com/en/product/Oracle-Java-JRE-1.7.x/
threats.kaspersky.com/en/product/Oracle-Java-JRE-1.8.x/
threats.kaspersky.com/en/product/Oracle-JRockit/
9 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
74.8%