CVE-2018-3007 — Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core)

Back Back to CVE browser

HIGH

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core)

Published Jul 18, 2018

8.6

HIGH

CVSS 3.0

EPSS 2.67%

Description

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. While the vulnerability is in Oracle Tuxedo, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Tuxedo accessible data. CVSS 3.0 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

Affected products

Vendor Oracle Corporation Product Tuxedo Default
n/a
- Version
  12.1.1
  Status
  affected
  Constraints
  -
- Version
  12.1.3
  Status
  affected
  Constraints
  -
- Version
  12.2.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Oracle Corporation

Tuxedo

n/a

Version	Status	Constraints
12.1.1	affected	-
12.1.3	affected	-
12.2.2	affected	-

Remediation

No remediation recorded yet.

Metrics

2.67% 0.02675

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02675

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (21 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.67% (0.02675)	85.27th	v5 (v2026.06.15)
Jun 15, 2026	2.71% (0.02710)	84.00th	v5 (v2026.06.15)
Mar 30, 2025	2.54% (0.02543)	84.10th	v4 (v2025.03.14)
Mar 29, 2025	4.59% (0.04590)	81.68th	v4 (v2025.03.14)
Mar 17, 2025	2.54% (0.02543)	84.42th	v4 (v2025.03.14)
Jul 20, 2024	0.14% (0.00144)	50.71th	v3 (v2023.03.01)
May 2, 2024	0.14% (0.00144)	49.67th	v3 (v2023.03.01)
Jan 18, 2024	0.17% (0.00171)	54.30th	v3 (v2023.03.01)
Dec 9, 2023	0.16% (0.00162)	52.72th	v3 (v2023.03.01)
Jul 15, 2023	0.24% (0.00244)	61.40th	v3 (v2023.03.01)
Jul 12, 2023	0.40% (0.00395)	69.87th	v3 (v2023.03.01)
May 8, 2023	0.45% (0.00451)	71.34th	v3 (v2023.03.01)
Mar 7, 2023	0.28% (0.00279)	63.37th	v3 (v2023.03.01)
Mar 6, 2023	0.95% (0.00954)	36.37th	v2 (v2022.01.01)
Sep 2, 2022	0.95% (0.00954)	34.50th	v2 (v2022.01.01)
Apr 1, 2022	0.95% (0.00954)	32.50th	v2 (v2022.01.01)
Feb 4, 2022	0.95% (0.00954)	16.28th	v2 (v2022.01.01)
Feb 3, 2022	0.83% (0.00833)	24.58th	v1
Jan 6, 2022	0.83% (0.00833)	23.96th	v1
Sep 1, 2021	0.83% (0.00833)	57.50th	v1
Apr 14, 2021	0.83% (0.00833)	0.00th	v1

Weaknesses (0)

No CWE recorded.

References (3)

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
x_refsource_CONFIRMPatchVendor Advisory
http://www.securityfocus.com/bid/104814
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041310
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html		x_refsource_CONFIRMPatchVendor Advisory
http://www.securityfocus.com/bid/104814		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041310		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner oracle

Published Jul 18, 2018

Updated Oct 2, 2024

Reserved Dec 15, 2017

Link CVE-2018-3007

CISA Vulnrichment

Updated Oct 2, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-3007

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-3007