CVE-2018-3108: Vulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware (subcomponent: Oracle N...

Security readout for executives and security teams

CVE-2018-3108 affects Oracle Fusion Middleware’s Oracle Notification Service in versions 12.2.1.2 and 12.2.1.3. A low-privileged attacker with HTTPS network access could gain unauthorized access to critical Fusion Middleware data. Oracle rates exploitation as difficult, and the available sources do not show active exploitation. Exposure is most likely where Oracle Fusion Middleware 12.2.1.2 or 12.2.1.3 is deployed and Oracle Notification Service is reachable over HTTPS by low-privileged users or internal network actors. The source bundle does not identify other affected products or versions. Prioritize remediation for systems holding sensitive data or reachable beyond tightly controlled administrative networks. The issue is not described as actively exploited, but successful exploitation could expose critical Fusion Middleware data, making patch verification and access reduction appropriate near-term work. Mitigation focus: Apply the relevant Oracle Critical Patch Update guidance for affected Fusion Middleware versions.; Confirm current vendor-supported fixes through Oracle advisory or support channels.; Restrict HTTPS access to Oracle Notification Service to trusted networks and roles..

Prepared

Jun 7, 2026, 05:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.