CVE-2018-8013

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

18.92% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 97.2% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2018-05-24 16:00Z8 YR AGO

Last updated

2024-09-16 23:16Z2 YR AGO

Reserved

2018-03-09

Assigning CNA

apache

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-502Deserialization of Untrusted DataBase

Data version

5.1

Document digest

4d2fef3122cc9ea40d63c098de20d6d2d944d4667675cd28dd034e31041a3ada

• www.securityfocus.com104252http://www.securityfocus.com/bid/104252vdb-entry
• lists.debian.org[debian-lts-announce] 20180525 [SECURITY] [DLA 1385-1] batik security updatehttps://lists.debian.org/debian-lts-announce/2018/05/msg00016.htmlmailing-list
• www.debian.orgDSA-4215https://www.debian.org/security/2018/dsa-4215vendor-advisory
• usn.ubuntu.comUSN-3661-1https://usn.ubuntu.com/3661-1/vendor-advisory
• mail-archives.apache.org[xmlgraphics-batik-dev] 20180523 [CVE-2018-8013] Apache Batik information disclosure vulnerabilityhttps://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-dev/201805.mbox/%3c000701d3f28f%24d01860a0%24704921e0%24%40gmail.com%3emailing-list
• www.securitytracker.com1040995http://www.securitytracker.com/id/1040995vdb-entry
• lists.apache.org[xmlgraphics-commits] 20200615 svn commit: r1878851 - /xmlgraphics/site/trunk/content/security.mdtexthttps://lists.apache.org/thread.html/r9e90b4d1cf6ea87a79bb506541140dfbf4801f4463a7cee08126ee44%40%3Ccommits.xmlgraphics.apache.org%3Emailing-list
• lists.apache.org[xmlgraphics-commits] 20200615 svn commit: r1878850 - /xmlgraphics/site/trunk/content/security.mdtexthttps://lists.apache.org/thread.html/rc0a31867796043fbe59113fb654fe8b13309fe04f8935acb8d0fab19%40%3Ccommits.xmlgraphics.apache.org%3Emailing-list
• www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
• www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
• www.oracle.comhttps://www.oracle.com/security-alerts/cpujul2020.html
• www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
• www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
• www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
• xmlgraphics.apache.orghttps://xmlgraphics.apache.org/security.html
• www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2020.html
• security.gentoo.orgGLSA-202401-11https://security.gentoo.org/glsa/202401-11vendor-advisory