cbcvebase.

Oracle Solaris vulnerabilities

559 known vulnerabilities affecting oracle/solaris.

Total CVEs
559
CISA KEV
7
actively exploited
Public exploits
30
Exploited in wild
12
Severity breakdown
CRITICAL46HIGH123MEDIUM287LOW103

Vulnerabilities

Page 25 of 28
CVE-2023-21900P4MEDIUMCVSS 4.0v10v112023-01-18
CVE-2023-21900 [MEDIUM] CVE-2023-21900: Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch). Supported vers Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker
nvd
CVE-2024-20920P4LOWCVSS 3.8v112024-01-16
CVE-2024-20920 [LOW] CWE-200 CVE-2024-20920: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The support Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may signific
nvd
CVE-2009-3519P4MEDIUMCVSS 4.9v8v9+1 more2009-10-01
CVE-2009-3519 [MEDIUM] CWE-772 CVE-2009-3519: Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris be Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_109, allow local users to cause a denial of service (memory consumption) via vectors related to (1) M_DATA, (2) M_PROTO, (3) M_PCPROTO, and (4) M_SIG STREAMS messages.
nvd
CVE-2010-3517P4MEDIUMCVSS 4.9v102010-10-14
CVE-2010-3517 [MEDIUM] CVE-2010-3517: Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availabi Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to Kernel/X86.
nvd
CVE-2022-21439P4MEDIUMCVSS 4.2v10v112022-07-19
CVE-2022-21439 [MEDIUM] CVE-2022-21439: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Supported version Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other t
nvd
CVE-2018-3266P4LOWCVSS 3.9v11.32018-10-17
CVE-2018-3266 [LOW] CVE-2018-3266: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Verified Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Verified Boot). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthori
nvd
CVE-2010-2386P4MEDIUMCVSS 4.9v8v9+1 more2010-07-13
CVE-2010-2386 [MEDIUM] CVE-2010-2386: Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to aff Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to GigaSwift Ethernet Driver.
nvd
CVE-2010-2394P4MEDIUMCVSS 4.7v102010-07-13
CVE-2010-2394 [MEDIUM] CVE-2010-2394: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to TCP/IP.
nvd
CVE-2010-2400P4MEDIUMCVSS 4.6v9v102010-07-13
CVE-2010-2400 [MEDIUM] CVE-2010-2400: Unspecified vulnerability in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect Unspecified vulnerability in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to Kernel/Filesystem.
nvd
CVE-2010-2399P4MEDIUMCVSS 4.6v102010-07-13
CVE-2010-2399 [MEDIUM] CVE-2010-2399: Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availabi Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to Kernel/VM.
nvd
CVE-2011-2313P4MEDIUMCVSS 4.3v10.02011-10-18
CVE-2011-2313 [MEDIUM] CVE-2011-2313: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to ZFS, a different vulnerability than CVE-2011-2311.
nvd
CVE-2019-2807P4LOWCVSS 3.9v11.42019-07-23
CVE-2019-2807 [LOW] CVE-2019-2807: Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zo Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zones). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a p
nvd
CVE-2021-35549P4LOWCVSS 3.9v112021-10-20
CVE-2021-35549 [LOW] CVE-2021-35549: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported ve Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the a
nvd
CVE-2021-2381P4LOWCVSS 3.9v112021-07-21
CVE-2021-2381 [LOW] CVE-2021-2381: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported ver Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the atta
nvd
CVE-2022-21298P4LOWCVSS 3.9v112022-01-19
CVE-2022-21298 [LOW] CVE-2022-21298: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Install). The supported ve Vulnerability in the Oracle Solaris product of Oracle Systems (component: Install). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the a
nvd
CVE-2015-4834P4LOWCVSS 3.7v11.22015-10-21
CVE-2015-4834 [LOW] CVE-2015-4834: Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, i Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Utility/Zones.
nvd
CVE-2014-1504P4LOWCVSS 2.6v11.32014-03-19
CVE-2014-1504 [LOW] CWE-264 CVE-2014-1504: The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consid The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data: URL, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document that is accessed after a browser restart.
nvd
CVE-2023-22128P4LOWCVSS 3.1v10v112023-10-17
CVE-2023-22128 [LOW] CVE-2023-22128: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Supported ve Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via rquota to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful a
nvd
CVE-2016-0458P4MEDIUMCVSS 4.0v112016-01-21
CVE-2016-0458 [MEDIUM] CVE-2016-0458: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vec Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vectors related to Kernel DAX.
nvd
CVE-2022-21494P4MEDIUMCVSS 4.0v112022-04-19
CVE-2022-21494 [MEDIUM] CVE-2022-21494: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported ver Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than
nvd
Oracle Solaris vulnerabilities | cvebase