Oracle Sun System Firmware vulnerabilities

2 CVEs affecting Oracle Sun System Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-5781, published 2013-10-16.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-5781, published 2013-10-16. Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle PARC Enterprise T4 Servers running Sun System Firmware before 8.3.0.b allows local users to affect confidentiality, integrity, and availability via vectors related…
• CVE-2013-3838, published 2013-10-16. Medium severity, CVSS 4.0. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle SPARC Enterprise T & M Series Servers running Sun System Firmware before 6.7.13 for SPARC T1, 7.4.6.c for SPARC T2, 8.3.0.b for SPARC T3 & T4, 9.0.0.d for SPARC T5…