Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2010-4436: Oracle Sun Management Center 4.0 could leak data

CVE-2010-4436 · published 15 years ago

Summary

The Sun Management Center version 4.0 web console can be accessed remotely, potentially allowing outsiders to see confidential information. This risk exists because of an unknown weakness in the console's handling of requests. Apply the latest security updates from Oracle and limit access to trusted networks or users.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
oracle	sunmc	4.0 `cpe:2.3:a:oracle:sunmc:4.0:::::::*`

Original advisory text

Unspecified vulnerability in Oracle Sun Management Center (SunMC) 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Console.

References

http://osvdb.org/70570
http://secunia.com/advisories/42989 Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html Vendor Advisory
http://www.securityfocus.com/bid/45885
http://www.vupen.com/english/advisories/2011/0156 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/64814

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.0 Medium

Exploitation

2% chance of attack within 30 days

Timeline

Published19 Jan 2011

Updated31 Oct 2026

First seen29 Sep 2026

Sources

CVE-2010-4436 · NVD

Track software like this

Free during beta