Critical severity · published Oct 25, 2016
CVE-2016-5580
Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.7 and 5.2 allows remote authenticated users to affect confidentiality and availability…
9.6
CVSS
1.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.7 and 5.2 allows remote authenticated users to affect confidentiality and availability via vectors through Web Services.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SG
Secure Global Desktop · Oracle
4.7; 5.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-5580
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-5580
Patch
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
www.securityfocus.com
http://www.securityfocus.com/bid/93632
More from Secure Global Desktop
9.0
CVE-2021-40438
mod_proxy SSRF
10.0
CVE-2021-2248
Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server)
10.0
CVE-2021-2177
Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Gateway)
9.9
CVE-2021-2447
Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server)
9.8
CVE-2019-3822
libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow