Oracle Integrated Lights Out Manager Firmware vulnerabilities

21 CVEs affecting Oracle Integrated Lights Out Manager Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-20906, published 2024-01-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-2566, published 2013-03-15. Medium severity, CVSS 5.9. EPSS: 84.4% chance of exploitation in the next 30 days. The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis…
CVE-2015-2808, published 2015-04-01. Low severity, CVSS 3.7. EPSS: 73.9% chance of exploitation in the next 30 days. The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to…
CVE-2015-3195, published 2015-12-06. Medium severity, CVSS 5.3. EPSS: 38.7% chance of exploitation in the next 30 days. The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed…
CVE-2016-5457, published 2016-07-21. High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect confidentiality, integrity, and availability via…
CVE-2016-5453, published 2016-07-21. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors…
CVE-2016-5449, published 2016-07-21. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect availability via vectors related to Console Redirection.
CVE-2016-5448, published 2016-07-21. Medium severity, CVSS 6.5. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity and availability via vectors related to SNMP.
CVE-2016-3481, published 2016-07-21. High severity, CVSS 7.7. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect availability via vectors related to Web.
CVE-2016-5445, published 2016-07-21. High severity, CVSS 8.3. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown…
CVE-2016-5446, published 2016-07-21. High severity, CVSS 7.3. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors…

Latest

CVE-2024-20906, published 2024-01-16. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Integrated Lights Out Manager (ILOM) product of Oracle Systems (component: System Management). Supported versions that are affected are 3, 4 and 5. Easily exploitable…
CVE-2018-2568, published 2018-01-18. High severity, CVSS 7.3. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: Remote Console Application). Supported versions that are affected are 3.x and…
CVE-2018-2566, published 2018-01-18. High severity, CVSS 7.7. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: Remote Console Application). Supported versions that are affected are 3.x and…
CVE-2017-10265, published 2017-10-19. High severity, CVSS 7.3. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to…
CVE-2017-10260, published 2017-10-19. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to…
CVE-2017-10194, published 2017-10-19. Low severity, CVSS 2.7. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to…