Unscored severity · published Oct 14, 2010
CVE-2010-3544
Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect integrity and…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect integrity and availability via unknown vectors related to Administration. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable source that this is cross-site request forgery (CSRF) that allows remote attackers to stop an instance via the management console.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SP
Sun Products Suite · Oracle
7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3544
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3544
jvn.jp
http://jvn.jp/en/jp/JVN50133036/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000042.html
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA10-287A.html
More from Sun Products Suite
–
CVE-2013-0417
Unspecified vulnerability in the Sun Storage Common Array Manager (CAM) component in Oracle Sun Products Suite 6.9.0 allows remote attackers to affect confidentiality, related to…
–
CVE-2012-3126
Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Products Suite 3.3 allows local users to affect confidentiality, integrity, and availability via unknown…
–
CVE-2012-0523
Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows local users to affect confidentiality, integrity, and availability…
–
CVE-2012-0516
Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality, integrity, and…
–
CVE-2012-0208
Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows remote authenticated users to affect confidentiality, integrity, and…