Oracle Solaris has an unspecified vulnerability (CNVD-2022-31849)

Oracle Solaris is a UNIX operating system from Oracle Systems, Inc. A security vulnerability in Oracle Solaris allows a highly privileged attacker to compromise Oracle Solaris by logging into the infrastructure where Oracle Solaris is executed. A successful attack requires human interaction from...

Oracle Enterprise Manager Ops Center (Apr 2022 CPU)

The 12.4.0.0 versions of Enterprise Manager Ops Center installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2022 CPU advisory. - Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization component: Web Server Apache HTTP Server...

Oracle Solaris Critical Patch Update : apr2022_SRU11_4_42_113_1

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to t...

CVE-2022-21493

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2022-21446

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris. Successful attacks of this...

CVE-2022-21416

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

Design/Logic Flaw

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris. Successful attacks of this...

CVE-2022-21494

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2022-21494

CVE-2022-21494 is a vulnerability in Oracle Solaris (kernel) affecting Solaris 11. An attacker with local access and user interaction can cause a hang or DoS on the system. Public details confirm the issue is kernel-level with the reported impact and that Oracle released patches in the April 2022...

CVE-2022-21493

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2022-21463

CVE-2022-21463 is a local kernel component vulnerability in Oracle Solaris 11. A low-privileged user able to log on can cause a hang or frequent, repeatable crashes (partial/complete DOS) in the Solaris kernel. The public sources consistently identify this as a local, low-impact issue with CVSS 3...

CVE-2022-21461

CVE-2022-21461 affects Oracle Solaris (Kernel) on Solaris 11. An attacker with local logon and low privileges can exploit this to gain unauthorized access to data (confidentiality impact rated HIGH); no explicit remote exploitation is described. The issue is listed among Oracle’s April 2022 CPU p...

CVE-2022-21446

CVE-2022-21446 concerns Oracle Solaris (11) Utility: an input-validation related vulnerability allows an unauthenticated, network-accessible attacker to read and modify data or access all Solaris data. The issue is documented across multiple sources (NVD, Red Hat, CNVD) with CVSS 3.1 base score 8...

CVE-2022-21446

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris. Successful attacks of this...

CVE-2022-21446: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris. Successful attacks of this...

CVE-2022-21375

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2022-21375

CVE-2022-21375 affects Oracle Solaris 11 kernel. A local, low-privilege attacker with logon can cause a hang or frequent crash (DoS) on the Solaris host. CVSS 3.1 base score 5.5 (A). References indicate Oracle CPU patches in Jan 2022 (and related advisories) as remediation. No exploitation detail...

CVE-2022-21298

CVE-2022-21298 affects Oracle Solaris (11) Install component. The vulnerability allows a low-privilege, locally authenticated user with logon to the infrastructure running Oracle Solaris to compromise the system, with exploitation requiring user interaction. Impacts include unauthorized updates/i...

Design/Logic Flaw

Vulnerability in the Oracle Solaris product of Oracle Systems component: Device drivers. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Whil...

Design/Logic Flaw

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...