Get real-time updates on Telegram
CVE-2018-12115: node.js before 6.14.4 (exclusive), from 8.0.0 (inclusive), before 8.11.4 (exclusive), from 10.0.0 (inclusive), before…
CVE-2018-12115. CVSS 2.0 base score 5.0 (MEDIUM, NVD). EPSS 0.08093 (percentile 0.94742), scored 14-Oct-2026.
Affected technology
node.js · before 6.14.4 (exclusive)
nodejs
node.js · from 8.0.0 (inclusive), before 8.11.4 (exclusive)
nodejs
node.js · from 10.0.0 (inclusive), before 10.9.0 (exclusive)
nodejs
openshift container platform · 3.11
redhat
Node.js · All versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0
The Node.js Project
Description’s affected range: versions of Node.js prior to 6.14.4
Component: Not specified by the source
Attack conditions (NVD, CVSS 3.0): Network (remote) · No privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.0 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-787
- CCR priority
- 22.0 /100 (P4)
- CVSS 2.0
- 5.0 /10 · CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P · NVD
- EPSS
- 0.08093 · percentile 0.94742 · 2026-10-14
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-15 18:59:14.583303+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 18:53:01.928580+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2018-12115.html