UpHeron
All vulnerabilities

Servers and applications

CVE-2018-1000613

Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack…

Severity
Critical 9.8
Published
9 Jul 2018
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
4.8% in the next 30 daysHigher than 91% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Oracle WebLogic ServerServers and applications · cpe:a:oracle:weblogic_server
  • Version 12.2.1.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-1000613
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-1000613