Oracle Hardware Management Pack vulnerabilities

2 CVEs affecting Oracle Hardware Management Pack, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-2906, published 2018-07-18.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-2906, published 2018-07-18. Low severity, CVSS 3.7. EPSS: 1.6% chance of exploitation in the next 30 days. Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite (subcomponent: Ipmitool). The supported version that is affected is 11.3. Difficult to exploit…
• CVE-2018-2792, published 2018-04-19. Low severity, CVSS 3.8. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite (subcomponent: Ipmitool). The supported version that is affected is Prior to 2.4.3. Easily exploitable…