First published: Wed Jan 15 2020(Updated: )
Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems (component: Templates). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Server for SPARC executes to compromise Oracle VM Server for SPARC. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM Server for SPARC accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle VM Server | =3.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability severity of CVE-2020-2571 is low with a severity value of 3.3.
CVE-2020-2571 affects the Oracle VM Server for SPARC product by allowing an unauthenticated attacker with logon to compromise the infrastructure.
The version 3.6 of Oracle VM Server for SPARC is affected by CVE-2020-2571.
Yes, CVE-2020-2571 is easily exploitable.
You can find more information about CVE-2020-2571 on the Oracle Security Alerts webpage.