[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRcrEqieTGPcyJmNk8vKfOFjNBPA8XG2Y8H2795oYZSs":3,"g5a-risk:CVE-2018-2879":152},{"success":4,"data":5,"meta":150},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":51,"references":52,"referencesCount":91,"weaknesses":92,"weaknessesCount":96,"isActivelyExploited":97,"cisaInfo":15,"otxData":15,"relatedBlogPosts":98,"seoMetadata":99,"configurations":124,"relatedVendorCves":134,"notableEvents":135},"CVE-2018-2879","What is CVE-2018-2879?","Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. Note: Please refer to Doc ID My Oracle Support Note 2386496.1 for instructions on how to address this issue.","Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine). Supported versions that are affected ...","2018-04-19T02:29:07.803","2019-10-03T00:03:26.223",9,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","NONE","CHANGED","CRITICAL",2.2,6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":34,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":34,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.21362,[39,39,39,39,39,39,39],"Critical",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"oracle","access_manager","11.1.2.3.0","cpe:2.3:a:oracle:access_manager:11.1.2.3.0:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"12.2.1.3.0","cpe:2.3:a:oracle:access_manager:12.2.1.3.0:*:*:*:*:*:*:*",2,[53,59,64,70,74,78,83,86],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F152551\u002FOAMbuster-Multi-Threaded-CVE-2018-2879-Scanner.html","Packetstormsecurity",[57,58],"Third Party Advisory","VDB Entry",{"url":60,"source":61,"tags":62},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FApr\u002F28","Seclists",[63,57],"Mailing List",{"url":65,"source":66,"tags":67},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpuapr2018-3678067.html","Oracle",[68,69],"Patch","Vendor Advisory",{"url":71,"source":72,"tags":73},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F103788","Securityfocus",[57,58],{"url":75,"source":76,"tags":77},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1040695","Securitytracker",[58,57],{"url":79,"source":80,"tags":81},"https:\u002F\u002Fgithub.com\u002FMostafaSoliman\u002FOracle-OAM-Padding-Oracle-CVE-2018-2879-Exploit","GitHub",[82,57],"Product",{"url":84,"source":61,"tags":85},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FApr\u002F27",[63,57],{"url":87,"source":88,"tags":89},"https:\u002F\u002Fwww.sec-consult.com\u002Fen\u002Fblog\u002F2018\u002F05\u002Foracle-access-managers-identity-crisis\u002F","Sec-consult",[90,57],"Exploit",8,[93],{"id":94,"name":94,"description":95},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":100,"metaDescription":101,"keywords":102,"canonicalUrl":103,"structuredData":104},"What is CVE-2018-2879? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-2879, a critical severity cyber security vulnerability from 2018. Vulnerability in the Oracle Access Manager component of ...","CVE-2018-2879, CVE-2018-2879 vulnerability, CVE-2018-2879 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, oracle security, access_manager vulnerability","\u002Fwhat-is\u002Fcve-2018-2879",{"@context":105,"@type":106,"headline":100,"description":101,"datePublished":10,"dateModified":11,"author":107,"publisher":111,"about":115,"mainEntityOfPage":119,"articleSection":122,"keywords":123},"https:\u002F\u002Fschema.org","TechArticle",{"@type":108,"name":109,"url":110},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":108,"name":109,"url":110,"logo":112},{"@type":113,"url":114},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":116,"name":6,"description":117,"additionalType":118},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":120,"@id":121},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-2879","Cybersecurity","CVE-2018-2879, CVE-2018-2879 vulnerability, CVE-2018-2879 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[125],{"Operator":15,"Negate":15,"Nodes":126},[127],{"Operator":128,"Negate":15,"CPEMatch":129},"OR",[130,132],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":131,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8DEAFEDC-2D0F-4A5F-99A0-BD41DD6DC017",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":133,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A287FA5D-D7D9-40B4-8DB2-1D7CE1808408",[],[136,143],{"id":137,"eventType":138,"eventTime":139,"details":140,"label":141,"color":142},"902d68d4-5fdf-462b-9b62-61c2c2b588d1","LOW_EPSS_DELTA","2026-06-16T04:06:12.167129+00:00","Daily EPSS score decreased by 0.215 on 2023-12-30","EPSS Score Decreased","green",{"id":144,"eventType":145,"eventTime":146,"details":147,"label":148,"color":149},"8aa2bfe3-3a74-4b87-bf58-692954286aac","HIGH_EPSS_DELTA","2026-08-25T04:07:40.474745+00:00","Daily EPSS score increased by 0.130 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":151,"version":32},1792367677545,{"score":153,"band":154,"action":155,"scoredAt":156},52,"Medium","Plan remediation","2026-10-16T06:43:55.529548+00:00"]