CVE-2020-2571: Low severity Oracle VM Server vulnerability

Published Jan 15, 2020

Updated

Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems (component: Templates). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Server for SPARC executes to compromise Oracle VM Server for SPARC. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM Server for SPARC accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).

Affected Software

1 affected component

Oracle VM Server=3.6

Event History

Jan 15, 2020

CVE Published

via MITRE·04:34 PM

Data Sourced

via MITRE·04:34 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the vulnerability severity of CVE-2020-2571?

The vulnerability severity of CVE-2020-2571 is low with a severity value of 3.3.

How does CVE-2020-2571 affect the Oracle VM Server for SPARC product?

CVE-2020-2571 affects the Oracle VM Server for SPARC product by allowing an unauthenticated attacker with logon to compromise the infrastructure.

Which version of Oracle VM Server for SPARC is affected by CVE-2020-2571?

The version 3.6 of Oracle VM Server for SPARC is affected by CVE-2020-2571.

Is CVE-2020-2571 easily exploitable?

Yes, CVE-2020-2571 is easily exploitable.

Where can I find more information about CVE-2020-2571?

You can find more information about CVE-2020-2571 on the Oracle Security Alerts webpage.