« Volver al listado

CVE-2008-2590

Estado: ModificadaBaja (3.5)—

Unspecified vulnerability in the Instance Management component in Oracle Database 10.1.0.5 and Enterprise Manager 10.1.0.6 has unknown impact and remote authenticated attack vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Oracle — Database ServerOracle — Enterprise Manager 10GOracle — Instance Management Component

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-2590",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-07-15T23:41:00.000",
  "references": [
    {
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/31087",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/31113",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1020496",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1020499",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/2109/references",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/2115",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/31087",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/31113",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1020496",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1020499",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/2109/references",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/2115",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the Instance Management component in Oracle Database 10.1.0.5 and Enterprise Manager 10.1.0.6 has unknown impact and remote authenticated attack vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en el componente Instance Management de Oracle Database 10.1.0.5 y Enterprise Manager 10.1.0.6 tiene impacto desconocido y vectores de ataque autentificados remotamente."
    }
  ],
  "lastModified": "2026-06-16T22:54:03.250",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "03A522A3-07D7-481F-A538-EA3D13256F63"
            },
            {
              "criteria": "cpe:2.3:a:oracle:enterprise_manager_10g:10.1.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7793BD7-1CBB-4B6A-877A-F8E07397CA9B"
            },
            {
              "criteria": "cpe:2.3:a:oracle:instance_management_component:10.1.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D501146-7A53-4C4C-855F-D1C57127F270"
            },
            {
              "criteria": "cpe:2.3:a:oracle:instance_management_component:10.1.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B23CE4E1-0DAB-49C4-AB75-A569E72EBA66"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}