CVE-2018-3280

中危 4.9CVE-2018-3280 · Published 17/10/2018 · updated 17/06/2026

要点

CVE-2018-3280 是影响 oncommand unified manager (netapp), mysql (oracle) 的中危 (CVSS 4.9)漏洞。
未来 30 天内被利用的概率（EPSS）：2.1%，高于 81.8% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
oncommand unified manager netapp	`≥ 7.3≥ 9.4`	No fix yet
mysql oracle	`≥ 8.0.0, ≤ 8.0.12`	No fix yet

Description

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: JSON). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References

oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html · Patch
securityfocus.com/bid/105607 · Third Party Advisory
securitytracker.com/id/1041888 · Third Party Advisory
security.netapp.com/advisory/ntap-20181018-0002 · Third Party Advisory

oncommand unified manager 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

oncommand unified manager

netapp

≥ 7.3≥ 9.4

No fix yet

mysql

oracle

≥ 8.0.0, ≤ 8.0.12

No fix yet

Description

oncommand unified manager 的其他漏洞

查看全部 →