Search/CVE-2018-8088
● CVE — Critical

CVE-2018-8088

Vendorredhat, oracle, qosProductjboss enterprise application platform, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux server tus, enterprise linux desktop, enterprise linux workstation, virtualization, virtualization host, goldengate application adapters, goldengate stream analytics, utilities framework, slf4jDiscoveredMar 20, 2018UpdatedNov 21, 2024

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.

View graph Watch Export
CVSS v3.1
9.8 CRITICAL
EPSS
14.7%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Aug 30, 2026
▼ 0.09pp
14.8% → 14.7% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
13 relationships
Timeline
disclosure → media coverage
Mar 20, 2018
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024