CVE-2018-2822

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: Cluster Geo. The supported version that is affected is 4.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris Cluster executes to compromi...

CVE-2018-2822

CVE-2018-2822 affects the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: Cluster Geo). The affected product/version is Solaris Cluster 4.3. The vulnerability allows a low-privileged, logon attacker to compromise Solaris Cluster, potentially leading to unauthorized a...

CVE-2018-2764

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...

CVE-2018-2763

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NTPD. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful...

CVE-2018-2857

CVE-2018-2857 affects the Sun ZFS Storage Appliance Kit (AK) HTTP data path subsystem in Oracle Sun Systems Products Suite, with versions before 8.7.17 vulnerable. The issue allows a network-authenticated, low-privilege attacker to perform unauthorized read, update, insert, or delete operations o...

CVE-2018-2858

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is Prior to 8.7.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-2792

Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite subcomponent: Ipmitool. The supported version that is affected is Prior to 2.4.3. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2018-2857

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is Prior to 8.7.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2792

CVE-2018-2792 affects the Hardware Management Pack component of Oracle Sun Systems Products Suite, specifically the Ipmitool subcomponent. The affected line is versions prior to 2.4.3. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise the ...

CVE-2018-2863

CVE-2018-2863 affects Oracle Sun Systems Products Suite’s Sun ZFS Storage Appliance Kit (AK) in the API frameworks subcomponent. The vulnerability is present in versions prior to 8.7.17 and can be triggered by a low-privileged user with network access over HTTP, potentially leading to unauthorize...

CVE-2018-2863

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2764

CVE-2018-2764 affects the Solaris kernel: vulnerable in Solaris on supported 10 and 11.3 systems, exploitable via network access to Solaris over NFS, leading to possible hang or complete denial of service. CVSS 3.0 base score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The advisory context from th...

CVE-2018-2808

CVE-2018-2808 affects the Solaris Kernel in Oracle Sun Systems Products Suite (for example, Solaris 11.3). The vulnerability enables a low-privileged user who can log into the system to compromise Solaris, with successful attacks potentially causing a hang or a frequently repeatable crash (comple...

CVE-2018-2808

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...

CVE-2018-2563

CVE-2018-2563 affects the Solaris LDAP Library in Oracle Sun Systems Products Suite, specifically the Solaris 10 and 11.3 releases. The root cause enables a low-privilege, network-access attacker (via LDAP) to compromise Solaris data: unauthorized updates/inserts/deletes and unauthorized reads of...

CVE-2018-2764

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...

CVE-2018-2808

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...

CVE-2018-2858

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is Prior to 8.7.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-2718

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...

CVE-2018-2754

CVE-2018-2754 affects Oracle Solaris 11.3, specifically the ZVNET Driver in the Solaris component of Oracle Sun Systems Products Suite. The root cause is a vulnerability in the ZVNET Driver that allows an unauthenticated, local attacker with logon access to compromise Solaris, potentially leading...