[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fb5m1HQZSDktCmhWEezEoXoutIsJ4vOd0uTWezfK9ZyE":3,"g5a-risk:CVE-2018-17888":119},{"success":4,"data":5,"meta":117},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":62,"weaknesses":63,"weaknessesCount":48,"isActivelyExploited":72,"cisaInfo":15,"otxData":15,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":108,"notableEvents":109},"CVE-2018-17888","What is CVE-2018-17888?","NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which could allow arbitrary remote code execution.","NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, whic...","2018-10-12T14:29:00.257","2019-10-09T23:36:59.677",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.29639,[39,39,39,39,39,39,39],"Critical",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"nuuo","nuuo_cms","*","cpe:2.3:a:nuuo:nuuo_cms:*:*:*:*:*:*:*:*",1,[50,56],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F105717","Securityfocus",[54,55],"Third Party Advisory","VDB Entry",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fics-cert.us-cert.gov\u002Fadvisories\u002FICSA-18-284-02","Us-cert",[60,54,61],"Patch","US Government Resource",2,[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-330","Use of Insufficiently Random Values","The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.","When product generates predictable values in a context requiring unpredictability, it may be possible for an attacker to guess the next value that will be generated, and use this guess to impersonate another user or access sensitive information.","Stable","Class","Simple",false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2018-17888? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-17888, a critical severity cyber security vulnerability from 2018. NUUO CMS all versions 3.1 and prior, The application us...","CVE-2018-17888, CVE-2018-17888 vulnerability, CVE-2018-17888 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, nuuo security, nuuo_cms vulnerability","\u002Fwhat-is\u002Fcve-2018-17888",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-17888","Cybersecurity","CVE-2018-17888, CVE-2018-17888 vulnerability, CVE-2018-17888 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":15,"Negate":15,"Nodes":101},[102],{"Operator":103,"Negate":15,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":106,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":107},"D15770E9-A56F-403C-B3EE-E3DA91E0DCAD","3.1",[],[110],{"id":111,"eventType":112,"eventTime":113,"details":114,"label":115,"color":116},"9c7f951f-ef57-4e1c-8e55-89b10154edf2","LOW_EPSS_DELTA","2026-06-16T04:06:14.471059+00:00","Daily EPSS score decreased by 0.111 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":118,"version":33},1792446626338,{"score":120,"band":121,"action":122,"scoredAt":123},61,"Medium","Plan remediation","2026-10-19T06:58:09.285503+00:00"]