{"cve":{"cve_id":"CVE-2010-3514","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.04485,"epss_percentile":0.90752,"epss_as_of":"2026-08-26","description":"Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown vectors related to Web Container.","published_at":"2010-10-13T23:00:00Z","last_modified_at":"2026-06-16T23:22:55.103000Z","cvss_v3_score":null,"cvss_v3_vector":null,"cvss_v3_severity":null,"cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":null,"nvd_references":["http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html","http://www.us-cert.gov/cas/techalerts/TA10-287A.html"],"vuln_status":"Modified","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-28T23:05:35.681537Z"},"effective_severity":null,"badges":["exploit"],"impact_analysis":[],"cvss_v3_decoded":{"version":null,"metrics":[]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"sun-products-suite","product_name":"sun_products_suite","version_start":"6.1","version_start_inclusive":true,"version_end":"6.1","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:sun_products_suite:6.1:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"sun-products-suite","product_name":"sun_products_suite","version_start":"7.0","version_start_inclusive":true,"version_end":"7.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:sun_products_suite:7.0:*:*:*:*:*:*:*"}],"exploit_refs":[{"source":"exploit-db","kind":"exploit-db","url":"https://www.exploit-db.com/exploits/15290","title":"Oracle Sun Java System Web Server - HTTP Response Splitting","author":"Roberto Suggi Liverani","disclosed_at":"2010-10-20"}],"news":[],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-287A.html","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2010-10-13T23:00:00Z","label":"CVE published","source":null},{"type":"exploit_known","at":"2010-10-20T00:00:00Z","label":"Public exploit available","source":"exploit-db"}]}