Unscored severity · published Jan 18, 2012
CVE-2011-3571
Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VI
Virtualization · Oracle
3.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3571
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3571
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2012-10/msg00041.html
secunia.com
http://secunia.com/advisories/48073
secunia.com
http://secunia.com/advisories/48074
secunia.com
http://secunia.com/advisories/50897
security.gentoo.org
http://security.gentoo.org/glsa/glsa-201406-32.xml
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
More from Virtualization
5.5
CVE-2021-20191
A flaw was found in ansible
5.3
CVE-2020-10775
An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing…
–
CVE-2015-2581
Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.1 and 5.2 allows remote attackers to affect confidentiality and availability via…
–
CVE-2014-0230
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire…
–
CVE-2014-6459
Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to…