Not analysed yet
We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.
Severity and exploitation
No source has published a CVSS score for this record yet.
- CISA KEV Not listed.
- EPSS 0.15, the 96th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
Sources
References from the CNA
- www.securityfocus.com/bid/103872
- access.redhat.com/errata/RHSA-2018:1278
- www.debian.org/security/2018/dsa-4185
- access.redhat.com/errata/RHSA-2018:1975
- support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03857en_us
- security.gentoo.org/glsa/201903-14
- www.debian.org/security/2018/dsa-4225
- www.securitytracker.com/id/1040697
- access.redhat.com/errata/RHSA-2018:1724
- usn.ubuntu.com/3644-1/
- access.redhat.com/errata/RHSA-2018:1723
- security.netapp.com/advisory/ntap-20180419-0001/
- access.redhat.com/errata/RHSA-2018:1201
- help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
- access.redhat.com/errata/RHSA-2018:1204
- www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- access.redhat.com/errata/RHSA-2018:1722
- access.redhat.com/errata/RHSA-2018:1974
- access.redhat.com/errata/RHSA-2018:1721
- usn.ubuntu.com/3691-1/
- lists.apache.org/thread.html/49dc6702104a86ecbb40292dcd329ce9ae4c32b74733199ecab14a73%40%3Cj-users.xerces.apache.org%3E
- access.redhat.com/errata/RHSA-2018:1202
- access.redhat.com/errata/RHSA-2018:1191
- access.redhat.com/errata/RHSA-2018:1188
- access.redhat.com/errata/RHSA-2018:1206
- access.redhat.com/errata/RHSA-2018:1270
- support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03915en_us
- lists.apache.org/thread.html/b53d4601ecd9ec63c799dbe1bc5b78e0d52f4cef429da2dfe63cf06d%40%3Cfop-dev.xmlgraphics.apache.org%3E
- lists.apache.org/thread.html/r449b5d89c7b2ba3762584cf6c38e01867d4b24706e023cf2a9911307%40%3Cuser.spark.apache.org%3E