« Volver al listado

CVE-2011-2299

Estado: ModificadaAlta (7.5)—

Unspecified vulnerability in Oracle SPARC Enterprise M3000, M4000, M5000, M8000, and M9000 XCP 1101 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to XSCF Control Package (XCP).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (6)

Oracle — Sparc Enterprise M3000 ServerOracle — Sparc Enterprise M4000 ServerOracle — Sparc Enterprise M5000 ServerOracle — Sparc Enterprise M8000 ServerOracle — Sparc Enterprise M9000 ServerOracle — XCP

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-2299",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert_us@oracle.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-07-21T00:55:02.223",
  "references": [
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.us-cert.gov/cas/techalerts/TA11-201A.html",
      "tags": [
        "US Government Resource"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.us-cert.gov/cas/techalerts/TA11-201A.html",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in Oracle SPARC Enterprise M3000, M4000, M5000, M8000, and M9000 XCP 1101 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to XSCF Control Package (XCP)."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en Oracle SPARC Enterprise M3000, M4000, M5000, M8000, M9000 y XCP 1101 y anteriores permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad, en relación con el paquete de control de XSCF (XCP)."
    }
  ],
  "lastModified": "2026-06-16T23:31:04.257",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:xcp:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "885CFFC2-ABF5-47F1-BE4D-28B6B8692536",
              "versionEndIncluding": "1100"
            },
            {
              "criteria": "cpe:2.3:h:oracle:sparc_enterprise_m3000_server:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EE985481-02B0-4813-9390-33BDD24257A1"
            },
            {
              "criteria": "cpe:2.3:h:oracle:sparc_enterprise_m4000_server:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4449463C-0681-42F7-887B-719E3FA06DE2"
            },
            {
              "criteria": "cpe:2.3:h:oracle:sparc_enterprise_m5000_server:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F96C3AEE-6D8F-445B-8F20-B02C93560C4E"
            },
            {
              "criteria": "cpe:2.3:h:oracle:sparc_enterprise_m8000_server:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F528DC3-ADBB-4612-A8C0-A4B806E5BB44"
            },
            {
              "criteria": "cpe:2.3:h:oracle:sparc_enterprise_m9000_server:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0050034-1E95-4724-B359-87C56D0198C4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert_us@oracle.com"
}