What is CVE-2010-3503?

CVE-2010-3503 is a vulnerability in Oracle Opensolaris. Published 2010-10-14.

Is CVE-2010-3503 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Oracle Opensolaris

CVE-2010-3503

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su.

Published 2010-10-14 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 6.3 (Medium). Vector: AV:L/AC:M/Au:N/C:C/I:C/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.008 (54.6th percentile), scored 2026-10-01.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 55th percentile — 54.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000

Affected products

Oracle Opensolaris
Oracle Solaris — versions 10

Public proof-of-concept exploits

hackerhouse-opensource/exploits

References

www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
www.us-cert.gov/cas/techalerts/TA10-287A.html (US Government Resource, third-party-advisory)

Frequently asked questions

What is CVE-2010-3503?: CVE-2010-3503 is a vulnerability in Oracle Opensolaris. Published 2010-10-14.
Is CVE-2010-3503 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.