CVE-2020-2571

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems (component: Templates). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Server for SPARC executes to compromise Oracle VM Server for SPARC. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM Server for SPARC accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jan 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-257107.5A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to f CVE-2020-257116.5A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operatio CVE-2020-257127.8A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation vulnerabil CVE-2020-257136.5A malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_common.CVE-2020-257156.1A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack t CVE-2020-257168.1A flaw was found in Cloudforms. A role-based privileges escalation flaw where export or import of administrator files is possible. An attack CVE-2020-257178.1A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privileg CVE-2020-257188.8A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller). This CVE-2020-257197.2A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC CVE-2020-25722.7Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plugin). Supported versions that are affected are 5.7.28 CVE-2020-257207.5A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all at CVE-2020-257218.8Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC now provides a way for Linux applications to