cbcvebase.

Oracle Solaris vulnerabilities

559 known vulnerabilities affecting oracle/solaris.

Total CVEs
559
CISA KEV
7
actively exploited
Public exploits
30
Exploited in wild
12
Severity breakdown
CRITICAL46HIGH123MEDIUM287LOW103

Vulnerabilities

Page 22 of 28
CVE-2025-53070P4MEDIUMCVSS 5.5v112025-10-21
CVE-2025-53070 [MEDIUM] CWE-267 CVE-2025-53070: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The support Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person oth
nvd
CVE-2018-3271P4MEDIUMCVSS 5.3v11.32018-10-17
CVE-2018-3271 [MEDIUM] CVE-2018-3271: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zo Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. While the vulnerability is in Solaris, attacks may significan
nvd
CVE-2018-2808P4MEDIUMCVSS 5.0v11.32018-04-19
CVE-2018-2808 [MEDIUM] CVE-2018-2808: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other than t
nvd
CVE-2018-2560P4MEDIUMCVSS 5.0v11.32018-01-18
CVE-2018-2560 [MEDIUM] CVE-2018-2560: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other tha
nvd
CVE-2020-2647P4MEDIUMCVSS 5.0v10v112020-01-15
CVE-2020-2647 [MEDIUM] CVE-2020-2647: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Supported version Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than
nvd
CVE-2015-4861P4LOWCVSS 3.5v11.32015-10-21
CVE-2015-4861 [LOW] CVE-2015-4861: Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
nvd
CVE-2009-2282P4MEDIUMCVSS 4.6v102009-07-01
CVE-2009-2282 [MEDIUM] CWE-862 CVE-2009-2282: The Virtual Network Terminal Server daemon (vntsd) for Logical Domains (aka LDoms) in Sun Solaris 10 The Virtual Network Terminal Server daemon (vntsd) for Logical Domains (aka LDoms) in Sun Solaris 10, and OpenSolaris snv_41 through snv_108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown vectors.
nvd
CVE-2015-4864P4LOWCVSS 3.5v11.32015-10-21
CVE-2015-4864 [LOW] CVE-2015-4864: Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows re Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.
nvd
CVE-2010-3507P4MEDIUMCVSS 6.6v8v9+1 more2010-10-14
CVE-2010-3507 [MEDIUM] CVE-2010-3507: Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentialit Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Live Upgrade.
nvd
CVE-2016-3453P4MEDIUMCVSS 5.5v102016-07-21
CVE-2016-3453 [MEDIUM] CVE-2016-3453: Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vec Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to Kernel.
nvd
CVE-2020-14537P4MEDIUMCVSS 5.5v112020-07-15
CVE-2020-14537 [MEDIUM] CWE-404 CVE-2020-14537: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Packaging Scripts). The su Vulnerability in the Oracle Solaris product of Oracle Systems (component: Packaging Scripts). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a p
nvd
CVE-2016-5576P4MEDIUMCVSS 5.5v11.32016-10-25
CVE-2016-5576 [MEDIUM] CWE-284 CVE-2016-5576: Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via v Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel Zones.
nvd
CVE-2016-3465P4MEDIUMCVSS 5.5v11.32016-04-21
CVE-2016-3465 [MEDIUM] CVE-2016-3465: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availabilit Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via vectors related to ZFS.
nvd
CVE-2009-2857P4MEDIUMCVSS 5.5v8v9+1 more2009-08-19
CVE-2009-2857 [MEDIUM] CWE-667 CVE-2009-2857: The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle int The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and write operations on the same file.
nvd
CVE-2013-3793P4MEDIUMCVSS 4.0v11.32013-07-17
CVE-2013-3793 [MEDIUM] CVE-2013-3793: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.1 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language.
nvd
CVE-2013-3794P4MEDIUMCVSS 4.0v11.32013-07-17
CVE-2013-3794 [MEDIUM] CVE-2013-3794: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.1 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Server Partition.
nvd
CVE-2013-3809P4MEDIUMCVSS 4.0v11.32013-07-17
CVE-2013-3809 [MEDIUM] CVE-2013-3809: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.1 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Audit Log.
nvd
CVE-2013-2376P4MEDIUMCVSS 4.0v11.32013-04-17
CVE-2013-2376 [MEDIUM] CVE-2013-2376: Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote au Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedure.
nvd
CVE-2014-2430P4LOWCVSS 3.5v11.32014-04-16
CVE-2014-2430 [LOW] CVE-2014-2430: Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows re Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to Performance Schema.
nvd
CVE-2020-2664P4MEDIUMCVSS 4.6v112020-01-15
CVE-2020-2664 [MEDIUM] CVE-2020-2664: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than t
nvd
Oracle Solaris vulnerabilities | cvebase