VDB

CISA-2020-2894

CISA-2020-2894 PUBLISHED CVSS 6 MEDIUM

Reported by oracle · Published April 15, 2020

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Risk Scores

CVSS 3.0
6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Affected Products

VendorProductVersions
Oracle CorporationVM VirtualBoxprior to 5.2.40, prior to 6.0.20, prior to 6.1.6
Oracle CorporationVM VirtualBoxprior to 5.2.40, prior to 6.0.20, prior to 6.1.6

Timeline

  • Apr 15, 2020 CVE Published
  • Sep 27, 2024 CVE Updated
  • Apr 26, 2026 Security Advisory
  • Apr 26, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›