Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-84ub-skmg-cyhc
Vulnerability ID VCID-84ub-skmg-cyhc
Aliases CVE-2018-1417
Summary JDK: J9 JVM allows untrusted code running under a security manager to elevate its privileges
Status Published
Exploitability 0.5
Weighted Severity 6.8
Risk 3.4
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv3 7.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1417.json
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
epss 0.01417 https://api.first.org/data/v1/epss?cve=CVE-2018-1417
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1417.json
https://api.first.org/data/v1/epss?cve=CVE-2018-1417
1568966 https://bugzilla.redhat.com/show_bug.cgi?id=1568966
RHSA-2018:0351 https://access.redhat.com/errata/RHSA-2018:0351
RHSA-2018:0352 https://access.redhat.com/errata/RHSA-2018:0352
RHSA-2018:0458 https://access.redhat.com/errata/RHSA-2018:0458
RHSA-2018:0521 https://access.redhat.com/errata/RHSA-2018:0521
RHSA-2018:1463 https://access.redhat.com/errata/RHSA-2018:1463
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1417.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.80512
EPSS Score 0.01417
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T14:26:09.289713+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1417.json 38.0.0