CVE-2007-6480 : The Oracle database component in Sun Management Center (Sun MC) 3.6.1, 3.6, and 3.5 Update 1 has a default account, whic

The Oracle database component in Sun Management Center (Sun MC) 3.6.1, 3.6, and 3.5 Update 1 has a default account, which allows remote attackers to obtain database access and execute arbitrary code.

Published 2007-12-20 20:46:00

Updated 2018-10-30 16:25:15

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Exploit prediction scoring system (EPSS) score for CVE-2007-6480

EPSS FAQ

5.92%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 94 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-6480

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.4	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:N	10.0	9.2	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: None

Products affected by CVE-2007-6480

SUN » Management+center » Version: 3.6.1 Sparc Edition
cpe:2.3:a:sun:management\+center:3.6.1:*:sparc:*:*:*:*:*
Matching versions
When used together with: SUN » Sunos » Version: 5.8
SUN » Management+center » Version: 3.6 Sparc Edition
cpe:2.3:a:sun:management\+center:3.6:*:sparc:*:*:*:*:*
Matching versions
When used together with: SUN » Sunos » Version: 5.8
SUN » Management+center » Version: 3.5 Update 1 Sparc Edition
cpe:2.3:a:sun:management\+center:3.5_update_1:*:sparc:*:*:*:*:*
Matching versions
When used together with: SUN » Sunos » Version: 5.8

Vulnerability Details : CVE-2007-6480

Exploit prediction scoring system (EPSS) score for CVE-2007-6480

CVSS scores for CVE-2007-6480

References for CVE-2007-6480

Products affected by CVE-2007-6480