{"api_version":"1","generated_at":"2026-07-23T22:42:38+00:00","cve":"CVE-2011-2299","urls":{"html":"https://cve.report/CVE-2011-2299","api":"https://cve.report/api/cve/CVE-2011-2299.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-2299","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-2299"},"summary":{"title":"CVE-2011-2299","description":"Unspecified vulnerability in Oracle SPARC Enterprise M3000, M4000, M5000, M8000, and M9000 XCP 1101 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to XSCF Control Package (XCP).","state":"PUBLISHED","assigner":"oracle","published_at":"2011-07-21 00:55:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html","name":"http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Oracle Critical Patch Update - July 2011","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.us-cert.gov/cas/techalerts/TA11-201A.html","name":"http://www.us-cert.gov/cas/techalerts/TA11-201A.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Technical Cyber Security Alert TA11-201A -- Oracle Updates for Multiple Vulnerabilities","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2299","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2299","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"2299","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"oracle","cpe5":"sparc_enterprise_m3000_server","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2299","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"oracle","cpe5":"sparc_enterprise_m4000_server","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2299","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"oracle","cpe5":"sparc_enterprise_m5000_server","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2299","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"oracle","cpe5":"sparc_enterprise_m8000_server","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2299","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"oracle","cpe5":"sparc_enterprise_m9000_server","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2299","vulnerable":"1","versionEndIncluding":"1100","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"xcp","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T22:53:17.475Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"TA11-201A","tags":["third-party-advisory","x_refsource_CERT","x_transferred"],"url":"http://www.us-cert.gov/cas/techalerts/TA11-201A.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-07-19T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle SPARC Enterprise M3000, M4000, M5000, M8000, and M9000 XCP 1101 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to XSCF Control Package (XCP)."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2011-10-05T09:00:00.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"name":"TA11-201A","tags":["third-party-advisory","x_refsource_CERT"],"url":"http://www.us-cert.gov/cas/techalerts/TA11-201A.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2011-2299","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in Oracle SPARC Enterprise M3000, M4000, M5000, M8000, and M9000 XCP 1101 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to XSCF Control Package (XCP)."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"TA11-201A","refsource":"CERT","url":"http://www.us-cert.gov/cas/techalerts/TA11-201A.html"},{"name":"http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2011-2299","datePublished":"2011-07-21T00:00:00.000Z","dateReserved":"2011-06-02T00:00:00.000Z","dateUpdated":"2024-08-06T22:53:17.475Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-07-21 00:55:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:xcp:*:*:*:*:*:*:*:*","versionEndIncluding":"1100","matchCriteriaId":"885CFFC2-ABF5-47F1-BE4D-28B6B8692536"},{"vulnerable":true,"criteria":"cpe:2.3:h:oracle:sparc_enterprise_m3000_server:-:*:*:*:*:*:*:*","matchCriteriaId":"EE985481-02B0-4813-9390-33BDD24257A1"},{"vulnerable":true,"criteria":"cpe:2.3:h:oracle:sparc_enterprise_m4000_server:-:*:*:*:*:*:*:*","matchCriteriaId":"4449463C-0681-42F7-887B-719E3FA06DE2"},{"vulnerable":true,"criteria":"cpe:2.3:h:oracle:sparc_enterprise_m5000_server:-:*:*:*:*:*:*:*","matchCriteriaId":"F96C3AEE-6D8F-445B-8F20-B02C93560C4E"},{"vulnerable":true,"criteria":"cpe:2.3:h:oracle:sparc_enterprise_m8000_server:-:*:*:*:*:*:*:*","matchCriteriaId":"3F528DC3-ADBB-4612-A8C0-A4B806E5BB44"},{"vulnerable":true,"criteria":"cpe:2.3:h:oracle:sparc_enterprise_m9000_server:-:*:*:*:*:*:*:*","matchCriteriaId":"E0050034-1E95-4724-B359-87C56D0198C4"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"2299","Ordinal":"1","Title":"CVE-2011-2299","CVE":"CVE-2011-2299","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"2299","Ordinal":"1","NoteData":"Unspecified vulnerability in Oracle SPARC Enterprise M3000, M4000, M5000, M8000, and M9000 XCP 1101 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to XSCF Control Package (XCP).","Type":"Description","Title":"CVE-2011-2299"},{"CveYear":"2011","CveId":"2299","Ordinal":"2","NoteData":"2011-07-20","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"2299","Ordinal":"3","NoteData":"2011-10-05","Type":"Other","Title":"Modified"}]}}}