CVE-2017-10260

High

Published: 19/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Vulnerability in Oracle Integrated Lights Out Manager (ILOM) in Oracle Sun Systems Products Suite affecting versions prior to 3.2.6. It allows an unauthenticated attacker with network access via HTTP to compromise ILOM, potentially leading to hangs or frequent crashes (complete DOS).

Risk Assessment

An attacker can exploit this vulnerability to disrupt the operation of Oracle ILOM, potentially causing significant availability issues for the organization.

Recommendation

It is recommended to update Oracle Integrated Lights Out Manager to version 3.2.6 or later to mitigate the risk associated with this vulnerability.

Other vulnerabilities in Oracle Integrated Lights Out Manager (ILOM)

CVE-2017-10265High
Vulnerability in Oracle Integrated Lights Out Manager (ILOM) in Oracle Sun Systems Products Suite, affecting versions prior to 3.2.6. It allows an unauthenticated attacker with network access via HTTP to compromise ILOM, potentially leading to unauthorized access to data and partial denial of service.

Original NVD description (English source)

Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Integrated Lights Out Manager (ILOM). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Integrated Lights Out Manager (ILOM). CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS