CVE-2015-2808

CVE-2015-2808 concerns RC4 usage in TLS/SSL within OpenJDK/OpenJDK components. The Invariance Weakness (Bar Mitzvah) means RC4 key material can leak partial plaintext from the first bytes of a TLS/SSL stream, enabling plaintext-recovery under certain traffic patterns. Public advisories for OpenJD...

CVE-2013-2566

CVE-2013-2566 involves RC4 biases in TLS/SSL allowing plaintext-recovery via large volumes of sessions with the same plaintext. Multiple connected sources confirm this issue affecting products such as F5 BIG-IP (various modules) and IBM Proventia/SiteProtector family. Affected in some BIG-IP rele...

CVE-2015-3195

CVE-2015-3195 affects OpenSSL’s ASN.1/TASN_DEC implementation mishandling errors from malformed X509_ATTRIBUTE data, enabling remote attackers to read memory of a CMS/PKCS#7 process. Public records show impact across multiple OpenSSL lines prior to updates: 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 bef...

CVE-2017-10265

Summary : CVE-2017-10265 affects the Oracle Integrated Lights Out Manager (ILOM) in Oracle Sun Systems Products Suite, subcomponent System Management, for versions prior to 3.2.6. An unauthenticated, remote attacker with network access over HTTP can compromise ILOM, enabling unauthorized read, up...

CVE-2017-10194

CVE-2017-10194 affects Oracle Integrated Lights Out Manager (ILOM) within Oracle Sun Systems Products Suite, subcomponent System Management. The vulnerability exists in versions before 3.2.6. An attacker with network access via HTTP can gain unauthorized read access to a subset of ILOM data. CVSS...

CVE-2024-20906

CVE-2024-20906 affects Oracle’s Integrated Lights Out Manager (ILOM) in the System Management component for versions 3–5. The flaw enables a highly privileged attacker with network access over ICMP to compromise ILOM, with attack success requiring user interaction and potentially affecting other ...

CVE-2018-2566

CVE-2018-2566 refers to a vulnerability in the Oracle Sun Systems Products Suite, specifically within the Integrated Lights Out Manager (ILOM ) Remote Console Application. Affected are ILOM versions 3.x and 4.x. The underlying issue allows a low-privilege attacker who has network access via TLS t...

CVE-2017-10260

CVE-2017-10260 affects Oracle Integrated Lights Out Manager (ILOM) in Oracle Sun Systems Products Suite (subcomponent: System Management) prior to version 3.2.6. An unauthenticated attacker with network access via HTTP can cause a hang or frequent crashes (complete DOS). CVSS 3.0 base score 7.5 (...

CVE-2018-2568

CVE-2018-2568 affects Oracle Sun Systems’ Integrated Lights Out Manager (ILOM), subcomponent Remote Console Application, with affected versions 3.x and 4.x. The vulnerability allows unauthenticated remote access over TLS, potentially exposing data (read/update/delete) and causing partial denial o...

CVE-2014-6584

CVE-2014-6584 affects Oracle Integrated Lights Out Manager (ILOM) in Sun Systems Products Suite ILOM prior to 3.2.4. The issue is described as an unspecified vulnerability that allows remote authenticated users to affect confidentiality via unknown vectors related to Backup Restore. Connected doc...

CVE-2015-0424

Oracle Integrated Lights Out Manager (ILOM) IPMI-related vulnerability (ILOM versions before 3.2.4) allows remote authenticated users to affect confidentiality, integrity, and availability. Root cause described as an unspecified issue in the IPMI component. Affected product: Oracle ILOM; impact i...

CVE-2016-3481

CVE-2016-3481 affects Oracle Sun Systems Products Suite ILOM (Integrated Lights Out Manager) Web subcomponent, versions 3.0, 3.1 and 3.2. The vulnerability is described as unspecified and allows remote authenticated users to affect availability via Web-related vectors. The vulnerability is associ...

CVE-2016-5446

CVE-2016-5446 concerns an unspecified vulnerability in the ILOM (Infrastructure subcomponent) of Oracle Sun Systems Products Suite versions 3.0–3.2. The connected documents identify the affected component and indicate a remote attacker may impact confidentiality, integrity, and availability via t...

CVE-2016-3585

CVE-2016-3585 is an unspecified vulnerability affecting the ILOM component of Oracle Sun Systems Products Suite (3.0, 3.1, 3.2). The description states it allows remote attackers to affect confidentiality and integrity via vectors related to Emulex. The connected documents identify this vulnerabi...

CVE-2016-5447

CVE-2016-5447 concerns an unspecified vulnerability in the ILOM component of Oracle Sun Systems Products Suite (versions 3.0–3.2). The issue allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Connected sources confirm this vulnerability e...

CVE-2016-5445

Technical details about CVE-2016-5445 are not publicly provided in the attached documents. The entries describe an unspecified vulnerability in ILOM across Sun Systems products but do not specify affected versions, exploit vectors, or fixes. Monitor for updates.

CVE-2016-5448

The CVE-2016-5448 entry concerns an unspecified vulnerability in the ILOM (Integrated Lights Out Manager) component of Oracle Sun Systems Products Suite 3.0/3.1/3.2. The issue is exploitable remotely via SNMP, with impact to integrity and availability (partial integrity impact, partial availabili...

CVE-2016-3451

CVE-2016-3451 affects the ILOM (Integrated Lights Out Manager) component of Oracle Sun Systems Products Suite versions 3.0–3.2. The surge of connected documents confirms a Web-facing subcomponent vulnerability that enables remote attackers to modify data, impacting integrity (CNVD notes update/in...

CVE-2016-5457

CVE-2016-5457 affects the ILOM component in Oracle Sun Systems Products Suite versions 3.0–3.2. The vulnerability enables remote authenticated users to affect confidentiality, integrity, and availability via vectors related to LUMAIN, due to issues in the ILOM subsystem (IPMI-related in CNVD entr...

CVE-2016-5453

CVE-2016-5453 affects the ILOM component of Oracle Sun Systems Products Suite (versions 3.0–3.2). The issue involves IPMI subcomponents that allow remote attackers to impact confidentiality, integrity, and availability. The NVD entry lists high to critical impact across CIA with network access. E...

CVE-2016-5449

CVE-2016-5449 affects Oracle Sun Systems Products Suite’s ILOM (Integrated Lights Out Manager) component across versions 3.0, 3.1, and 3.2. The vulnerability is described as an unspecified remote issue impacting availability via Console Redirection, meaning a remote attacker could cause a denial ...