Lucene search

K
cve[email protected]CVE-2022-21563
HistoryJul 19, 2022 - 10:15 p.m.

CVE-2022-21563

2022-07-1922:15:00
NVD-CWE-noinfo
web.nvd.nist.gov
36
4
oracle
zfs
storage
appliance
kit
vulnerability
cve-2022-21563
security
oracle systems
cvss 3.1
nvd

3.4 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

3.2 Low

AI Score

Confidence

High

2.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:M/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

15.2%

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle ZFS Storage Appliance Kit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 3.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L).

VendorProductVersionCPE
oraclesun_zfs_storage_appliance_kit_software*cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit_software:*:*:*:*:*:*:*:*

Social References

More

3.4 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

3.2 Low

AI Score

Confidence

High

2.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:M/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

15.2%

Related for CVE-2022-21563