Oracle Solaris vulnerabilities
559 known vulnerabilities affecting oracle/solaris.
Total CVEs
559
CISA KEV
7
actively exploited
Public exploits
30
Exploited in wild
12
Severity breakdown
CRITICAL46HIGH123MEDIUM287LOW103
Vulnerabilities
Page 24 of 28
CVE-2025-30700P4LOWCVSS 3.5v112025-04-15
CVE-2025-30700 [LOW] CWE-284 CVE-2025-30700: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication m
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the att
nvd
CVE-2016-5553P4MEDIUMCVSS 5.0v10v11.32016-10-25
CVE-2016-5553 [MEDIUM] CVE-2016-5553: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availabilit
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via unknown vectors.
nvd
CVE-2015-4869P4MEDIUMCVSS 4.9v10v11.22015-10-21
CVE-2015-4869 [MEDIUM] CVE-2015-4869: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availabilit
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via unknown vectors related to Kernel.
nvd
CVE-2016-0676P4MEDIUMCVSS 4.7v102016-04-21
CVE-2016-0676 [MEDIUM] CVE-2016-0676: Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vec
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to the kernel.
nvd
CVE-2015-2642P4MEDIUMCVSS 4.4v10v11.22015-10-21
CVE-2015-2642 [MEDIUM] CVE-2015-2642: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentia
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Gzip.
nvd
CVE-2015-0471P4MEDIUMCVSS 4.4v10v11.22015-04-16
CVE-2015-0471 [MEDIUM] CVE-2015-0471: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentia
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to libelfsign.
nvd
CVE-2014-6463P4LOWCVSS 3.3v11.32014-10-15
CVE-2014-6463 [LOW] CVE-2014-6463: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows re
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML.
nvd
CVE-2013-1511P4LOWCVSS 3.5v11.32013-04-17
CVE-2013-1511 [LOW] CVE-2013-1511: Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote au
Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
nvd
CVE-2014-4243P4LOWCVSS 2.8v11.32014-07-17
CVE-2014-4243 [LOW] CVE-2014-4243: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.1
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to ENFED.
nvd
CVE-2019-2545P4MEDIUMCVSS 4.0v10v112019-01-16
CVE-2019-2545 [MEDIUM] CVE-2019-2545: Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LD
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDoms IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability c
nvd
CVE-2016-5561P4LOWCVSS 3.1v11.32016-10-25
CVE-2016-5561 [LOW] CVE-2016-5561: Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect availability
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect availability via vectors related to IKE.
nvd
CVE-2015-4770P4MEDIUMCVSS 4.9v10v11.22015-07-16
CVE-2015-4770 [MEDIUM] CVE-2015-4770: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availabilit
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to UNIX filesystem.
nvd
CVE-2015-2589P4MEDIUMCVSS 4.9v10v11.22015-07-16
CVE-2015-2589 [MEDIUM] CVE-2015-2589: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availabilit
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to S10 Branded Zone.
nvd
CVE-2015-2609P4MEDIUMCVSS 4.9v11.22015-07-16
CVE-2015-2609 [MEDIUM] CVE-2015-2609: Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via v
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to CPU performance counters drivers.
nvd
CVE-2016-0428P4MEDIUMCVSS 4.9v112016-01-21
CVE-2016-0428 [MEDIUM] CVE-2016-0428: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unk
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Verified Boot.
nvd
CVE-2015-2614P4MEDIUMCVSS 4.9v11.22015-07-16
CVE-2015-2614 [MEDIUM] CVE-2015-2614: Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via v
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to NVM Express SSD driver.
nvd
CVE-2015-4831P4MEDIUMCVSS 4.9v11.22015-10-21
CVE-2015-4831 [MEDIUM] CVE-2015-4831: Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via u
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2015-4822.
nvd
CVE-2011-2198P4LOWCVSS 3.5v11.22014-05-21
CVE-2011-2198 [LOW] CWE-20 CVE-2011-2198: The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remo
The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remote authenticated users to cause a denial of service (CPU and memory consumption and crash) via a crafted file, as demonstrated by a file containing the string "\033[100000000000000000@".
nvd
CVE-2016-5559P4MEDIUMCVSS 4.1v10v11.32016-10-25
CVE-2016-5559 [MEDIUM] CVE-2016-5559: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect integrity v
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect integrity via vectors related to Kernel.
nvd
CVE-2014-4274P4MEDIUMCVSS 4.1v11.32014-10-15
CVE-2014-4274 [MEDIUM] CVE-2014-4274: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows lo
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.
nvd