Sun Management+center vulnerabilities

3 CVEs affecting Sun Management+center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-6480, published 2007-12-20.

More from Sun.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-6480, published 2007-12-20. High severity, CVSS 9.4. EPSS: 3.6% chance of exploitation in the next 30 days. The Oracle database component in Sun Management Center (Sun MC) 3.6.1, 3.6, and 3.5 Update 1 has a default account, which allows remote attackers to obtain database access and execute arbitrary code.
• CVE-2001-1479, published 2001-12-31. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. smcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMC_PORT.
• CVE-2003-1124, published 2003-12-31. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Unknown vulnerability in Sun Management Center (SunMC) 2.1.1, 3.0, and 3.0 Revenue Release (RR), when installed and run by root, allows local users to create or modify arbitrary files.