Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:vm:2.2.1:*:*:*:*:*:*:*

part: a version: 2.2.1 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductVm (eb93f597-fc9b-5f8d-90c5-2d5186b6a2e1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3585 vulnerable 2026-06-08 04:55:15.695306 Details available
Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a third party researcher that this is related to the exposure of unspecified functions using XML-RPC.
Published: 2010-10-14T17:00:00.000Z
Updated: 2024-08-07T03:18:51.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3584 vulnerable 2026-06-08 04:55:15.695007 Details available
Unspecified vulnerability in the Oracle VM component in Oracle VM 2.2.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a third party researcher that this is related to the storage of passwords and password hashes in cleartext in files with insecure permissions.
Published: 2010-10-14T17:00:00.000Z
Updated: 2024-08-07T03:18:51.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3583 vulnerable 2026-06-08 04:55:15.694679 Details available
Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a third party researcher that this is related to the exposure of multiple unspecified functions through XML-RPC that allow execution of arbitrary OS commands.
Published: 2010-10-14T17:00:00.000Z
Updated: 2024-08-07T03:18:51.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3582 vulnerable 2026-06-08 04:55:15.694241 Details available
Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent.
Published: 2010-10-14T17:00:00.000Z
Updated: 2024-08-07T03:18:51.588Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.