Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2010-3514

4 documents4 sources

Severity

4.3MEDIUM

EPSS

12.7%

top 6.01%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Oracle SUN Products Suite

Timeline

PublishedOct 14

Latest updateMay 17

Description

Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown vectors related to Web Container.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/sun_products_suite6.1, 7.0+1

🔴Vulnerability Details

GHSA

GHSA-xj9g-c7f2-r4p5: Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 6↗2022-05-17

▶

CVEList

CVE-2010-3514: Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 6↗2010-10-13

▶

💥Exploits & PoCs

Exploit-DB

Oracle Sun Java System Web Server - HTTP Response Splitting↗2010-10-20

▶