Oracle Integrated Lights Out Manager Vulnerability in Oracle Sun Systems
CVE-2017-10265

7.3HIGH

Key Information:

Vendor
Oracle
Vendor
CVE Published:
19 October 2017

Summary

The vulnerability in Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite allows unauthenticated attackers with network access via HTTP to compromise the system. Exploitation can lead to unauthorized access and manipulation of accessible data, with the potential to execute unauthorized updates, insertions, or deletions. Additionally, the attacker may gain read access to confidential information and have the capability to initiate a partial denial of service. It's crucial for users and organizations to apply the necessary updates to safeguard their systems against such risks.

Affected Version(s)

SSM - (hot-tamale) ILOM: Integrated Lights Out Manager < 3.2.6

References

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.