VulnerabilityModified

CVE-2010-0866

Unspecified vulnerability in the JavaVM component in Oracle Database 11.1.0.7 and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

MEDIUM 6.5EPSS 11.3%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 11.3%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 2.0: 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS: 11.25% probability · 96th percentile
CISA KEV: Not listed
Affected: oracle/database server
Source: secalert_us@oracle.com

References

http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html
http://www.us-cert.gov/cas/techalerts/TA10-103B.htmlUS Government Resource
http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html
http://www.us-cert.gov/cas/techalerts/TA10-103B.htmlUS Government Resource

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.