vulnerability

Oracle WebLogic: CVE-2018-11058 : Critical Patch Update

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Sep 14, 2018
Added
Jul 14, 2020
Modified
Oct 16, 2025

Description

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would result in such issue.

Solutions

oracle-weblogic-jul-2020-cpu-10_3_6_0_0oracle-weblogic-jul-2020-cpu-12_1_3_0_0oracle-weblogic-jul-2020-cpu-12_2_1_3_0oracle-weblogic-jul-2020-cpu-12_2_1_4_0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.