Sun Virtual Desktop Infrastructure vulnerabilities

2 CVEs affecting Sun Virtual Desktop Infrastructure, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3923, published 2009-11-10.

More from Sun.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-3923, published 2009-11-10. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure (VDI) 3.0 does not require authentication, which allows remote attackers to obtain unspecified access via vectors…
• CVE-2009-2856, published 2009-08-18. Low severity, CVSS 3.5. EPSS: 1.3% chance of exploitation in the next 30 days. Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow…