CVE-2017-3582

HIGH

Oracle Sun Systems Products Suite <2.3.13 - Unauthenticated RCE

Title source: llm
STIX 2.1

Description

Vulnerability in the Oracle SuperCluster Specific Software component of Oracle Sun Systems Products Suite (subcomponent: Backup/Restore Utility). Supported versions that are affected are 2.3.8 and 2.3.13. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle SuperCluster Specific Software executes to compromise Oracle SuperCluster Specific Software. Successful attacks of this vulnerability can result in takeover of Oracle SuperCluster Specific Software. CVSS 3.0 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1038292
Third Party Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/97796

Scores

CVSS v3 8.4
EPSS 0.0020
EPSS Percentile 41.6%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

Status published
Products (4)
oracle/supercluster_specific_software 2.3.8
oracle/supercluster_specific_software 2.3.13
Oracle Corporation/SuperCluster Specific Software 2.3.13
Oracle Corporation/SuperCluster Specific Software 2.3.8
Published Apr 24, 2017
Tracked Since Feb 18, 2026