CVE-2021-1999

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: RAS subsystems. The supported version that is affected is 8.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit...

Oracle ZFS Storage Appliance 安全漏洞

Oracle ZFS Storage Appliance is a storage appliance from Oracle Corporation in the United States that supports flash memory, petabytes of file storage and a built-in Oracle database. A security vulnerability exists in the Oracle ZFS Storage Appliance Kit product. An attacker could exploit the...

VulnCheck KEV: CVE-2020-14871

Oracle Solaris and Oracle ZFS Storage Appliance Kit contain an unspecified vulnerability causing high impacts to confidentiality, integrity, and availability of affected systems...

Veeam Agent for Oracle Solaris Skips Hidden ZFS Snapshots

Challenge Veeam Agent for Oracle Solaris does not back up hidden ZFS snapshots. Cause Veeam Agent for Oracle Solaris cannot back up hidden ZFS snapshots that are explicitly specified as a source for backup. This is a by-design limitation from Oracle. By default, the .zfs directory is not visible...

Oracle Solaris Critical Patch Update : apr2020_SRU11_4_19_3_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Sun ZFS Storage Appliance Kit product of Oracle Systems component: Operating System Image. The supported version that is affected is 8.8. Difficult to exploit vulnerability allows low...

PT-2019-4525 · Illumos +1 · Illumos +1

Name of the Vulnerable Software and Affected Versions: Nexenta NexentaStor versions 4.0.5 through 5.1.2 Illumos affected versions not specified Description: The issue allows an attacker to have unintended access, for example, an attacker with WRITE XATTR can change permissions. This occurs due to...

CVE-2019-2878

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is 8.8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2019-2878

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is 8.8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

Code injection

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is 8.8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2019-2878

CVE-2019-2878 involves the Sun ZFS Storage Appliance Kit (AK) within Oracle Sun Systems Products Suite. The vulnerability affects the AK component’s HTTP data path subsystems in version 8.8.3, with a CVSS v3.0 base score of 6.1 (Confidentiality and Integrity impacts). It is described as unauthent...

CVE-2019-2878

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is 8.8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

Python CVE-2019-9636 Information Disclosure Vulnerability

Description Python Requests is prone to an information disclosure vulnerability. An attacker may leverage this issue to gain access to potentially sensitive information. This may aid in further attacks. Python versions 2.7 through 2.7.16 and 3.0 through 3.7.2 are vulnerable. Technologies Affected...

CVE-2019-2412

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: Object Store. The supported version that is affected is prior to 8.8.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

CVE-2019-2412

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: Object Store. The supported version that is affected is prior to 8.8.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

Code injection

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: Object Store. The supported version that is affected is prior to 8.8.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

CVE-2019-2412

CVE-2019-2412 affects Sun ZFS Storage Appliance Kit (AK) in Oracle Sun Systems Products Suite (subcomponent: Object Store). The affected version is prior to 8.8.2. The vulnerability allows a high-privilege attacker with local access to the infrastructure where AK runs to compromise AK and potenti...

CVE-2019-2412

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: Object Store. The supported version that is affected is prior to 8.8.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

CVE-2019-2412

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: Object Store. The supported version that is affected is prior to 8.8.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit Access Control Error Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. An access control error vulnerability exists in the Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit. An attacker...

The vulnerability of the API components of Sun ZFS Storage Appliance Kit allows a hacker to gain full control over the application.

The vulnerability of the API framework components of the Sun ZFS Storage Appliance Kit AK is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application by using network protocols...