PT-2017-15998

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 11.3 Description The issue allows a low-privileged attacker with logon access to the infrastructure where the software executes to compromise it. Successful attacks require human interaction from a...

PT-2017-15946

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 11.3 Description The issue affects the Kernel Zones virtualized NIC driver in the Solaris component, allowing a low-privileged attacker with network access via multiple protocols to compromise Solaris...

CVE-2017-3578: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: RAS subsystems. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Sun ZFS...

CVE-2017-3516: Undefined Security Weakness

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized NIC driver. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

CVE-2017-3621: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: IPC Frameworks. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2017-3498: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2017-3564: Undefined Security Weakness

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RBAC. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...

CVE-2016-5551: Improper Access Control

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: NAS device addition. The supported version that is affected is 4.3. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes ...

CVE-2017-3565: Undefined Security Weakness

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RBAC. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...

PT-2017-2107

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions 10 Description The issue is related to inadequate access control in the Common Desktop Environment CDE component of the Solaris operating system. This allows a low-privileged attacker with local acces...

PT-2017-15985

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 11.3 Description The issue allows a low-privileged attacker with logon access to the infrastructure to compromise Solaris, resulting in the ability to cause a hang or crash of Solaris, as well as...

PT-2017-16011

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version AK 2013 Description The issue affects the RAS subsystems component of the Sun ZFS Storage Appliance Kit AK, allowing an unauthenticated attacker with network access via multiple protocols to compromise...

CVE-2017-3623: Undefined Security Weakness

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel RPC. For supported versions that are affected see note. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. While the...

PT-2017-2108

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite subcomponent: Remote Administration Daemon version 11.3 Description The issue is related to inadequate access control in the Remote Administration Daemon component of the Solaris operating system. It allows an...

CVE-2017-3474: Undefined Security Weakness

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Zone. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...

CVE-2017-3585: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface subsystem. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2017-16016

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions AK 2013 Description The issue affects the User Interface subsystem of the Sun ZFS Storage Appliance Kit AK component, allowing an unauthenticated attacker with network access via HTTP to compromise th...

CVE-2017-3580: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: RAS subsystems. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

PT-2017-15934

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite subcomponent: Kernel version 11.3 Description The issue allows a low-privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris, resulting in unauthorized read access to ...

PT-2017-15952

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions 11.3 Description The issue affects the Kernel Zones virtualized NIC driver subcomponent, allowing a low-privileged attacker with network access via multiple protocols to compromise Solaris. Successful...