CVE-2017-10209

MEDIUM Year: 2017
CVSS v3 Score
5.2
Medium
CVSS v2 Score
3.6
Low
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 5.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L).

Related Vulnerabilities

CVE-2017-18702

MEDIUM
CVSS:5.2(Medium)

NETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings.

NVD-CWE-Other2017

CVE-2018-21230

MEDIUM
CVSS:5.2(Medium)

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.57, D6220 before 1.0.0.40, D6400 befo...

NVD-CWE-Other2018

CVE-2018-21231

MEDIUM
CVSS:5.2(Medium)

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.57, D6220 before 1.0.0.40, D6400 befo...

NVD-CWE-Other2018

CVE-2019-6337

MEDIUM
CVSS:5.2(Medium)

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.

NVD-CWE-Other2019

CVE-2021-2347

MEDIUM
CVSS:5.2(Medium)

Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.5.0. Easily exploitable vulnerabili...

NVD-CWE-Other2021

CVE-2021-31220

MEDIUM
CVSS:5.2(Medium)

SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies.

NVD-CWE-Other2021