Integrated Lights Out Manager Firmware vulnerabilities

Product

Integrated Lights Out Manager Firmware

by Oracle · last CVE Jan 16, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities21 In the news0 Timeline

Severity mix

Critical 1High 11Medium 5Low 2

Severity

All severities21 Critical1 High11 Medium5 Low2

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Integrated Lights Out Manager Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-5453	9.8	4%	Jul 21	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and… Affected: 3.0; 3.1; 3.2
CVE-2016-5457	8.8	4%	Jul 21	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect confidentiality, integrity, and… Affected: 3.0; 3.1; 3.2
CVE-2016-5445	8.3	2%	Jul 21	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and… Affected: 3.0; 3.1; 3.2
CVE-2018-2566	7.7	1%	Jan 18	Vulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: Remote Console Application) Affected: 3.0.0; 3.0.3; 3.0.4; 3.0.6; 3.0.8; 3.0.9; +19 more
CVE-2016-3481	7.7	3%	Jul 21	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect availability via vectors related… Affected: 3.0; 3.1; 3.2
CVE-2016-5447	7.6	2%	Jul 21	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect confidentiality, integrity, and… Affected: 3.0; 3.1; 3.2
CVE-2017-10260	7.5	2%	Oct 19	Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management) Affected: through 3.2.5
CVE-2016-5449	7.5	3%	Jul 21	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect availability via vectors related to… Affected: 3.0; 3.1; 3.2
CVE-2016-3585	7.4	2%	Jul 21	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality and integrity via vectors… Affected: 3.0; 3.1; 3.2
CVE-2018-2568	7.3	1%	Jan 18	Vulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: Remote Console Application) Affected: 3.0.0; 3.0.3; 3.0.4; 3.0.6; 3.0.8; 3.0.9; +19 more
CVE-2017-10265	7.3	1%	Oct 19	Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management) Affected: through 3.2.5
CVE-2016-5446	7.3	2%	Jul 21	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and… Affected: 3.0; 3.1; 3.2
CVE-2016-5448	6.5	3%	Jul 21	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity and availability via vectors… Affected: 3.0; 3.1; 3.2
CVE-2013-2566	5.9	84%	Mar 15	The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via… Affected: 3.0.0 through 3.2.11; 4.0.0 through 4.0.4
CVE-2015-3195	5.3	39%	Dec 6	The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors… Affected: 3.0 through 4.0.4
CVE-2024-20906	4.8	0%	Jan 16	Vulnerability in the Integrated Lights Out Manager (ILOM) product of Oracle Systems (component: System Management) Affected: 3.0.0; 4.0.0; 5.0.0
CVE-2016-3451	4.7	2%	Jul 21	Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity via vectors related to Web Affected: 3.0; 3.1; 3.2
CVE-2015-2808	3.7	74%	Apr 1	The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for… Affected: 3.0.0 through 3.2.11; 4.0.0 through 4.0.4
CVE-2017-10194	2.7	1%	Oct 19	Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management) Affected: through 3.2.5
CVE-2015-0424	–	1%	Jan 21	Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite ILOM prior to 3.2.4 allows remote authenticated users to… Affected: through 3.2.3
CVE-2014-6584	–	1%	Jan 21	Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite ILOM before 3.2.4 allows remote authenticated users to affect… Affected: through 3.2.3