VULNERABILITY INTELLIGENCE
CVE-2010-3585
CVSS score9 HIGH
EPSS probability52.05%
CISA KEVNot currently listed
Published2010-10-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Description
Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a third party researcher that this is related to the exposure of unspecified functions using XML-RPC.
Primary references
- secalert_us@oracle.com — Vendor Advisory
- secalert_us@oracle.com
- secalert_us@oracle.com — US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource