cbcvebase.

Oracle Solaris vulnerabilities

552 known vulnerabilities affecting oracle/solaris.

Total CVEs
552
CISA KEV
6
actively exploited
Public exploits
29
Exploited in wild
10
Severity breakdown
CRITICAL46HIGH117MEDIUM286LOW103

Vulnerabilities

Page 23 of 28
CVE-2015-4807P4LOWCVSS 3.5v11.32015-10-21
CVE-2015-4807 [LOW] CVE-2015-4807: Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when run Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when running on Windows, allows remote authenticated users to affect availability via unknown vectors related to Server : Query Cache.
nvd
CVE-2015-4836P4LOWCVSS 2.8v11.32015-10-21
CVE-2015-4836 [LOW] CVE-2015-4836: Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP.
nvd
CVE-2019-2544P4MEDIUMCVSS 4.0v10v112019-01-16
CVE-2019-2544 [MEDIUM] CVE-2019-2544: Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Ke Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can
nvd
CVE-2016-8330P4LOWCVSS 3.7v11.32017-01-27
CVE-2016-8330 [LOW] CWE-284 CVE-2016-8330: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized update,
nvd
CVE-2010-2392P4MEDIUMCVSS 5.6v102010-07-13
CVE-2010-2392 [MEDIUM] CVE-2010-2392: Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect integrit Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect integrity and availability, related to ZFS.
nvd
CVE-2016-0419P4MEDIUMCVSS 4.9v112016-01-21
CVE-2016-0419 [MEDIUM] CVE-2016-0419: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unk Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2016-0431.
nvd
CVE-2015-4907P4MEDIUMCVSS 4.6v11.22015-10-22
CVE-2015-4907 [MEDIUM] CVE-2015-4907: Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, i Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2015-4820.
nvd
CVE-2015-4891P4MEDIUMCVSS 4.6v11.22015-10-21
CVE-2015-4891 [MEDIUM] CVE-2015-4891: Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, i Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via vectors related to NSCD.
nvd
CVE-2013-3812P4LOWCVSS 3.5v11.32013-07-17
CVE-2013-3812 [LOW] CVE-2013-3812: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.1 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Replication.
nvd
CVE-2018-2901P4LOWCVSS 3.7v10.0v11.22018-07-18
CVE-2018-2901 [LOW] CVE-2018-2901: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via DHCP to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a parti
nvd
CVE-2013-1511P4LOWCVSS 3.5v11.32013-04-17
CVE-2013-1511 [LOW] CVE-2013-1511: Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote au Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
nvd
CVE-2015-3988P4LOWCVSS 3.5v11.22015-05-19
CVE-2015-3988 [LOW] CWE-79 CVE-2015-3988: Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.
nvd
CVE-2025-30700P4LOWCVSS 3.5v112025-04-15
CVE-2025-30700 [LOW] CWE-284 CVE-2025-30700: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication m Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the att
nvd
CVE-2016-5553P4MEDIUMCVSS 5.0v10v11.32016-10-25
CVE-2016-5553 [MEDIUM] CVE-2016-5553: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availabilit Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via unknown vectors.
nvd
CVE-2015-4869P4MEDIUMCVSS 4.9v10v11.22015-10-21
CVE-2015-4869 [MEDIUM] CVE-2015-4869: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availabilit Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via unknown vectors related to Kernel.
nvd
CVE-2016-0676P4MEDIUMCVSS 4.7v102016-04-21
CVE-2016-0676 [MEDIUM] CVE-2016-0676: Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vec Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to the kernel.
nvd
CVE-2015-2642P4MEDIUMCVSS 4.4v10v11.22015-10-21
CVE-2015-2642 [MEDIUM] CVE-2015-2642: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentia Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Gzip.
nvd
CVE-2015-0471P4MEDIUMCVSS 4.4v10v11.22015-04-16
CVE-2015-0471 [MEDIUM] CVE-2015-0471: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentia Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to libelfsign.
nvd
CVE-2014-0420P4LOWCVSS 2.8v11.32014-01-15
CVE-2014-0420 [LOW] CVE-2014-0420: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5.6. Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5.6.14 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Replication.
nvd
CVE-2014-2432P4LOWCVSS 2.8v11.32014-04-16
CVE-2014-2432 [LOW] CVE-2014-2432: Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlie Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated.
nvd
Oracle Solaris vulnerabilities | cvebase