Unspecified Vulnerability in Oracle Virtualization Secure Global Desktop Component
CVE-2016-5580

9.6CRITICAL

Key Information:

Vendor

Oracle
Status
Secure Global Desktop
Vendor
CVE Published:
25 October 2016

What is CVE-2016-5580?

An unspecified vulnerability exists in the Secure Global Desktop component of Oracle Virtualization that allows remote authenticated users to potentially compromise confidentiality and availability. This vulnerability can be exploited through specific vectors within Web Services, raising significant concerns regarding the security of the system. Users and administrators are advised to review the advisory and apply necessary mitigations.

References

http://www.securityfocus.com/bid/93632
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/security-advisory/cpuoc...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.