CVE-2018-2905

CVE-2018-2905 affects the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services). Affected versions are Prior to 8.7.20. The vulnerability allows an unauthenticated attacker with network access via SSL/TLS to compromise AK and obtain unauth...

CVE-2018-2901

CVE-2018-2901 affects Oracle Solaris (Kernel). Affects Solaris 10 and 11.2; vulnerable kernel code can be triggered by network access via DHCP, enabling an unauthenticated attacker to cause partial denial of service on Solaris. Documents consistently describe this as a network-exploitable kernel ...

CVE-2018-2906

The CVE-2018-2906 issue affects Oracle Sun Systems Products Suite Hardware Management Pack (subcomponent Ipmitool), specifically the 11.3 release. The root cause is an access-control flaw that allows an unauthenticated attacker, with network access via IPMI, to read a subset of data from Hardware...

CVE-2018-2903

CVE-2018-2903 is a vulnerability in the Solaris kernel component of Oracle Solaris (SunOS) affecting Solaris 10 and 11.3. The connected documents confirm it is a local, high-privilege issue that can allow a logon user to compromise Solaris, potentially leading to unauthorized data access or full ...

CVE-2018-2926

CVE-2018-2926 affects Oracle Solaris 11.3 (NVIDIA-GFX Kernel driver). A low-privileged, network-based attacker (ISCSI) can cause a hang or crash (DoS) and unauthorized read/update/delete of Solaris data. The NVIDIA-GFX subcomponent is the root cause; CVSS 3.0 base score is 7.6. Patch remediation ...

CVE-2018-3057

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

CVE-2018-2937

The CVE-2018-2937 entry concerns Oracle Sun Systems Sun ZFS Storage Appliance Kit (AK) UI. Affected is AK prior to version 8.7.19. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise AK, leading to unauthorized update, insertion, or deletion of some da...

CVE-2018-2923

The CVE-2018-2923 issue affects Oracle Sun ZFS Storage Appliance Kit (AK) within the Sun Systems Products Suite, Core Services, with fixes available for versions prior to 8.7.20. A high-privilege attacker with local access could read a subset of AK data ( confidentiality impact ). The CVSSv3 scor...

CVE-2018-2921

CVE-2018-2921 affects Oracle Sun Systems Products Suite, specifically the Sun ZFS Storage Appliance Kit (AK) User Interface, with affected versions prior to 8.7.18. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to read data from the AK UI, and attackers may i...

CVE-2018-2927

CVE-2018-2927 affects the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems), with exploitation possible on versions prior to 8.7.18. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to gain ...

CVE-2018-2916

The CVE-2018-2916 issue affects the Sun ZFS Storage Appliance Kit (AK) subcomponent API frameworks in Oracle Sun Systems Products Suite. The affected line is the AK component prior to version 8.7.18. Exploitation requires network access and a high-privilege attacker, with no user interaction, to ...

CVE-2018-2916

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols...

CVE-2018-3057

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

CVE-2018-2906

Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite subcomponent: Ipmitool. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via IPMI to compromise Hardware Management...

CVE-2018-2903

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2018-2920

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.19. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols ...

CVE-2018-2908

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via RPC to compromise Solaris. While the vulnerability is in Solari...

CVE-2018-2920

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.19. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols ...

CVE-2018-2923

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: Core Services. The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

CVE-2018-2905

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: Core Services. The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromi...