CVE Feed

    Dashboard / CVE / CVE-2010-3544

    CVE-2010-3544

    Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect integrity and availability via unknown vectors related to Administration. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable source that this is cross-site request forgery (CSRF) that allows remote attackers to stop an instance via the management console.

    Published:Oct 14, 2010
    Last Modified:Apr 11, 2025
    EPS:Oct 14, 2010
    EPSS Score:0.01376
    CVSS Score:5.8

    Affected Products

    Vendor
    Oracle
    Product
    Sun Products Suite

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2013-0417 (CVSS 5) — Unspecified vulnerability in the Sun Storage Common Array Manager (CAM) component in Oracle Sun Products Suite…
    CVE-2012-3126 (CVSS 6.2) — Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Products Suite 3.3 allows local users…
    CVE-2012-0523 (CVSS 7.2) — Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows …
    CVE-2012-0208 (CVSS 9) — Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows …
    CVE-2012-0516 (CVSS 6.8) — Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite 7.0 allows r…
    CVE-2011-2327 (CVSS 2.1) — Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allo…
    CVE-2011-3535 (CVSS 5) — Unspecified vulnerability in the Solaris component in Oracle Sun Products Suite 8, 9, 10, and 11 Express allow…
    CVE-2011-3507 (CVSS 3.5) — Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allo…
    CVE-2011-2310 (CVSS 7.5) — Unspecified vulnerability in the Oracle Waveset component in Oracle Sun Products Suite 8.1.0 and 8.1.1 allows …
    CVE-2011-3517 (CVSS 7.8) — Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 8.0 allows remote attac…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High