CVE-2018-1417

Severity: high (CVSS 8.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-22 · updated 2026-06-17
Weakness: CWE-732

Description

Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.

Affected products

IBM SDK, Java Technology Edition: 6.0.0.0, 6.1.0.0, 7.0.0.0, 7.1.0.0, 8.0.0.0

References

http://www.ibm.com/support/docview.wss?uid=isg3T1027315
http://www.ibm.com/support/docview.wss?uid=swg22014937
http://www.securityfocus.com/bid/103216
http://www.securitytracker.com/id/1040403
https://access.redhat.com/errata/RHSA-2018:1463
https://exchange.xforce.ibmcloud.com/vulnerabilities/138823
https://www.ibm.com/support/docview.wss?uid=swg22012965
http://www.ibm.com/support/docview.wss?uid=isg3T1027315
http://www.ibm.com/support/docview.wss?uid=swg22014937
http://www.securityfocus.com/bid/103216
http://www.securitytracker.com/id/1040403
https://access.redhat.com/errata/RHSA-2018:1463

Get alerted when CVE-2018-1417 or the next vulnerability affects your stack