CVE-2017-3588

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: HA for MySQL. Supported versions that are affected are 3.3 and 4.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes to...

CVE-2017-10194

CVE-2017-10194 affects Oracle Integrated Lights Out Manager (ILOM) within Oracle Sun Systems Products Suite, subcomponent System Management. The vulnerability exists in versions before 3.2.6. An attacker with network access via HTTP can gain unauthorized read access to a subset of ILOM data. CVSS...

Oracle Solaris Local Vulnerability (CNVD-2017-210237)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A security vulnerability exists in the Kernel subcomponent of the Solaris component of the Oracle Sun Systems Products Suite, versions 10 and 11. A local...

Oracle Sun Systems Products Suite Unauthorized Modification Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A security vulnerability exists in the Kernel subcomponent of the Solaris component version 11 of the Oracle Sun Systems Products Suite. A local attacker...

CVE-2017-10234

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: NAS device addition. The supported version that is affected is 4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris Cluster executes to...

CVE-2017-10095

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successfu...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NFSv4. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFSv4 to compromise Solaris. Successful attacks of this...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: CDE Calendar. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Solaris. Successful attacks of thi...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Oracle Java Web Console. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2017-10004

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

Code injection

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun Z...

CVE-2017-10042

CVE-2017-10042 affects Oracle Solaris 10 and 11, specifically the IKE implementation in the Solaris component of Oracle Sun Systems Products Suite. The vulnerability is exploitable over the network with no authentication required via IKE, potentially allowing an attacker to cause a hang or freque...

CVE-2017-10042

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: IKE. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via IKE to compromise Solaris. Successful attacks of this...

CVE-2017-10004

CVE-2017-10004 concerns the Solaris kernel in Oracle Sun Systems Products Suite, affecting Solaris 10 and 11. The evidence (NVD description and Nessus plugin entries) indicates a vulnerability in the Kernel subcomponent that allows a high-privileged user with logon to compromise Solaris, with the...

CVE-2017-10122

The CVE-2017-10122 issue affects Oracle Solaris (Kernel) in Sun Systems Products Suite on Solaris 10 and 11. It is a local, high-privilege vulnerability where exploitation requires user interaction and logon to the Solaris host, potentially enabling unauthorized update/insert/delete of Solaris da...

CVE-2017-10062

CVE-2017-10062 affects the Solaris component of Oracle Sun Systems Suite, specifically the Oracle Java Web Console subcomponent. The vulnerability is in Solaris 10 (x86 and SPARC) and allows a low-privilege attacker with logon to the system to compromise Solaris, leading to unauthorized updates/d...

CVE-2017-10095

The CVE-2017-10095 vulnerability affects Oracle Solaris (Kernel subcomponent) on Solaris 11. The issue is locally exploitable with logon access and requires user interaction; impact is potential unauthorized updates/deletes to Solaris data, with CVSSv3.0 base score 3.3 (I = LOW). Public details i...

CVE-2017-3632

CVE-2017-3632 affects Solaris SPP (SunOS) CDE Calendar, with affected versions 10 and 11. The vulnerability is exploitable over TCP with no authentication, enabling an attacker to take over Solaris (high impact on confidentiality, integrity, availability). The connected documents corroborate the ...

CVE-2017-10003

Affected software: Oracle Solaris (Solaris 10 on x86 and SPARC). Component: Network Services Library of the Sun Systems Products Suite. Root cause / vulnerability detail: Local vulnerability that allows a low-privileged user with logon to the Solaris host to access or modify Solaris data (unautho...