CVE-2017-10013

CVE-2017-10013 affects the Sun ZFS Storage Appliance Kit (AK) UI in Oracle Sun Systems Products Suite, AK 2013. An unauthenticated attacker with network access via HTTP can compromise the AK UI; attacks require user interaction and may affect additional products, with high impact (CVSSv3 8.3). No...

CVE-2017-10013: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun Z...

CVE-2017-10016: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun Z...

PT-2017-10984

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK version 2013 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Sun ZFS Storage Appliance Kit AK. Successful attacks require human interaction from a person...

PT-2017-10981

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK version 2013 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Sun ZFS Storage Appliance Kit AK. Successful attacks require human interaction from a person...

legis.state.ak.us XSS vulnerability

Vulnerable URL: http://www.legis.state.ak.us/basis/getbill.asp?bill=1"...

CVE-2017-3584

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: RAS subsystems. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS...

CVE-2017-3584

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: RAS subsystems. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS...

CVE-2017-3584

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: RAS subsystems. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS...

CVE-2017-3578

CVE-2017-3578 describes a vulnerability in the Sun ZFS Storage Appliance Kit (AK) within Oracle Sun Systems Products Suite (subcomponent: RAS subsystems). Affected: AK 2013. The issue is exploitable by a low-privileged attacker who can log on to the infrastructure where AK runs, potentially leadi...

CVE-2017-3584: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: RAS subsystems. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS...

CVE-2017-3585: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface subsystem. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3580: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: RAS subsystems. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2017-3578: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: RAS subsystems. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS...

CVE-2017-3621: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: IPC Frameworks. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to...

PT-2017-16048

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK version 2013 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise the Sun ZFS Storage Appliance Kit AK. Successful attacks can result in the...

PT-2017-16015

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK version 2013 Description The issue allows a low-privileged attacker with logon access to the infrastructure where Sun ZFS Storage Appliance Kit AK is executed to compromise it. Successful attacks can result in...

PT-2017-16011

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version AK 2013 Description The issue affects the RAS subsystems component of the Sun ZFS Storage Appliance Kit AK, allowing an unauthenticated attacker with network access via multiple protocols to compromise...

PT-2017-16009

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK version 2013 Description The issue affects the RAS subsystems component of the Sun ZFS Storage Appliance Kit AK, allowing a low-privileged attacker with logon access to the infrastructure to compromise the Sun...

h1z1showcase.com XSS vulnerability

Vulnerable URL: http://h1z1showcase.com/KOTK/skin.php?item=Skin:%20Toxic%20AK-47%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...