CVE-2018-3285

MÉDIO 4.9CVE-2018-3285 · Published 17/10/2018 · updated 17/06/2026

Em resumo

CVE-2018-3285 é uma vulnerabilidade MÉDIO (CVSS 4.9) que afeta oncommand unified manager (netapp), mysql (oracle).
Chance de exploração nos próximos 30 dias (EPSS): 2.1%, maior que 81.8% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
oncommand unified manager netapp	`≥ 7.3≥ 9.4`	No fix yet
mysql oracle	`≥ 8.0.0, ≤ 8.0.12`	No fix yet

Description

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Windows). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html · Patch
securityfocus.com/bid/105607 · Third Party Advisory
securitytracker.com/id/1041888 · Third Party Advisory
security.netapp.com/advisory/ntap-20181018-0002 · Third Party Advisory

Mais vulnerabilidades de oncommand unified manager

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

oncommand unified manager

netapp

≥ 7.3≥ 9.4

No fix yet

mysql

oracle

≥ 8.0.0, ≤ 8.0.12

No fix yet

Description

Mais vulnerabilidades de oncommand unified manager

Ver tudo →