CVE-2021-35549

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2021-35549

Oracle Solaris 11 Utility vulnerability (CVE-2021-35549) is described as a low-privilege, local flaw that requires user interaction to exploit. Successful attacks could unauthorizedly update/insert/delete Oracle Solaris data and cause a partial denial of service in affected systems. The CVSS 3.1 ...

CVE-2021-35539

CVE-2021-35539 affects Oracle Solaris 11 in the Filesystem component. Public sources indicate an easily exploitable, low-privilege path that can cause a hang or frequent crash (DoS). The CVSSv3.1 base score is 6.5 (Availability), with LOCAL attack vector and low attack complexity; privileges requ...

CVE-2021-35539

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

CVE-2021-2192

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

Design/Logic Flaw

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2021-2192

CVE-2021-2192 affects Oracle Solaris Kernel on SPARC, version 11. The vulnerability is exploitable locally by a low-privilege user with logon, leading to a hang or crash (complete DOS) and possible unauthorized data updates/deletions. CVSSv3.1 base score is 6.1 (I, A impacts; L confidentiality) w...

CVE-2021-2147

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: Installation. The supported version that is affected is 8.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit execut...

CVE-2020-14871

Vulnerability in the Oracle Solaris product of Oracle Systems component: Pluggable authentication module. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris...

CVE-2020-14754

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successfu...

CVE-2020-14759

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

Code injection

Vulnerability in the Oracle Solaris product of Oracle Systems component: Pluggable authentication module. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris...

CVE-2020-14871

Vulnerability in the Oracle Solaris product of Oracle Systems component: Pluggable authentication module. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris...

CVE-2020-14818

CVE-2020-14818 targets Oracle Solaris 11, specifically the Utility component. The issue is a vulnerability in Solaris 11 allowing a low-privileged attacker who can reach the system over SSH on the network to compromise Oracle Solaris. Attacks require user interaction, and while the flaw exists in...

CVE-2020-14754

CVE-2020-14754 affects Oracle Solaris 11, specifically the Filesystem component. The vulnerability is described as an authorization issue that could allow a low-privileged, logged-on attacker to compromise Solaris, potentially causing the system to hang or crash (complete/ frequent DOS). The base...

CVE-2020-14759

CVE-2020-14759 affects Oracle Solaris kernel (likely Solaris 11) with a vulnerability in the Kernel component. The available connected documents describe a low-privilege, logon-access vulnerability that requires user interaction to exploit and can lead to unauthorized updates, inserts, or deletio...

CVE-2020-14758

CVE-2020-14758 affects Oracle Solaris (Kernel) on the 11.x line. The vulnerability is a local, low-privilege issue where an attacker with logon can exploit a kernel component flaw to gain unauthorized access to data or achieve partial denial of service; human interaction is required. CVSS 3.1 bas...

CVE-2020-14758

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2020-14759: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

The vulnerability of the Data Masking component regarding data copying from working Oracle systems allows attackers to modify, add, or delete data, or gain unauthorized access to protected information.

The vulnerability of Data Masking in copying data from Oracle workstations exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to modify, add, or delete data, or gain unauthorized access to protected information...