CVE-2010-3535

2010-10-1418:00:17

[email protected]

web.nvd.nist.gov

cve-2010-3535

directory server enterprise edition

oracle

sun products suite

identity synchronization

windows

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

5.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.3%

JSON

Unspecified vulnerability in the Directory Server Enterprise Edition component in Oracle Sun Products Suite 6.0, 6.1, 6.2, and 6.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Identity Synchronization for Windows.

Affected configurations

NVD

Node

oraclesun_products_suiteMatch6.0

oraclesun_products_suiteMatch6.1

oraclesun_products_suiteMatch6.2

oraclesun_products_suiteMatch6.3

CPENameOperatorVersion
oracle:sun_products_suiteoracle sun products suiteeq6.0
oracle:sun_products_suiteoracle sun products suiteeq6.1
oracle:sun_products_suiteoracle sun products suiteeq6.2
oracle:sun_products_suiteoracle sun products suiteeq6.3

CPE	Name	Operator	Version
oracle:sun_products_suite	oracle sun products suite	eq	6.0
oracle:sun_products_suite	oracle sun products suite	eq	6.1
oracle:sun_products_suite	oracle sun products suite	eq	6.2
oracle:sun_products_suite	oracle sun products suite	eq	6.3