CVE-2018-2568

Vulnerability in the Integrated Lights Out Manager ILOM component of Oracle Sun Systems Products Suite subcomponent: Remote Console Application. Supported versions that are affected are 3.x and 4.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to...

CVE-2018-2566

CVE-2018-2566 refers to a vulnerability in the Oracle Sun Systems Products Suite, specifically within the Integrated Lights Out Manager (ILOM ) Remote Console Application. Affected are ILOM versions 3.x and 4.x. The underlying issue allows a low-privilege attacker who has network access via TLS t...

CVE-2018-2566

Vulnerability in the Integrated Lights Out Manager ILOM component of Oracle Sun Systems Products Suite subcomponent: Remote Console Application. Supported versions that are affected are 3.x and 4.x. Difficult to exploit vulnerability allows low privileged attacker with network access via TLS to...

CVE-2018-2560

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2018-2664

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is Prior to 8.7.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2018-2560

CVE-2018-2560 affects the Solaris kernel subcomponent in Oracle Sun Systems Products Suite (11.3). It enables a local, high-privilege attacker and requires user interaction to compromise Solaris; confidentiality is impacted (C:H) with no documented integrity/availability impact. Remediation is av...

CVE-2018-2566

Vulnerability in the Integrated Lights Out Manager ILOM component of Oracle Sun Systems Products Suite subcomponent: Remote Console Application. Supported versions that are affected are 3.x and 4.x. Difficult to exploit vulnerability allows low privileged attacker with network access via TLS to...

CVE-2018-2611

Technical details about CVE-2018-2611 are not publicly provided in the connected documents. The available records reiterate affected product and severity but do not disclose exploit specifics, affected versions beyond prior to 8.7.13, or remediation steps. Monitor for updates.

CVE-2018-2568

CVE-2018-2568 affects Oracle Sun Systems’ Integrated Lights Out Manager (ILOM), subcomponent Remote Console Application, with affected versions 3.x and 4.x. The vulnerability allows unauthenticated remote access over TLS, potentially exposing data (read/update/delete) and causing partial denial o...

CVE-2018-2568

Vulnerability in the Integrated Lights Out Manager ILOM component of Oracle Sun Systems Products Suite subcomponent: Remote Console Application. Supported versions that are affected are 3.x and 4.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to...

CVE-2018-2623

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is Prior to 8.7.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2717

CVE-2018-2717 affects Oracle Solaris SPARC Platform (subcomponent SPARC Platform) on Solaris 10 and 11.3. Root cause is a vulnerability in the SPARC Platform that allows a low-privilege user with logon to compromise Solaris; exploitation requires user interaction. Impacts include unauthorized cre...

CVE-2018-2710

Vulnerability CVE-2018-2710 affects the Solaris kernel in Oracle Sun Systems Products Suite (Solaris 10). The issue is exploitable remotely with ICMP, unauthenticated, potentially causing a hang or frequent crash (complete DoS) on Solaris 10. Connected sources identify affected kernel component a...

CVE-2018-2623

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is Prior to 8.7.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2624

CVE-2018-2624 affects the Sun ZFS Storage Appliance Kit (AK) UI component of Oracle Sun Systems Products Suite. Affected: all versions before 8.7.13. Root cause: untrusted access that allows an unauthenticated, network-based attacker to compromise AK via HTTP. Impact: potential unauthorized acces...

CVE-2018-2664

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is Prior to 8.7.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2018-2578

CVE-2018-2578 affects Oracle Solaris (Kernel subcomponent) on Solaris 11.3. The vulnerability is local-privilege based, with exploits requiring user interaction and a logon to the Solaris host; successful exploitation can lead to takeover of Solaris and potentially impact other products. The issu...

CVE-2018-2624

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is Prior to 8.7.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2664

The CVE-2018-2664 entry describes a vulnerability in the Sun ZFS Storage Appliance Kit (AK) UI of Oracle Sun Systems Products Suite. Affected are versions prior to 8.7.13. The issue allows an unauthenticated attacker with network access over HTTP to compromise the AK component, and attacks may si...

CVE-2018-2623

CVE-2018-2623 affects the Sun ZFS Storage Appliance Kit (AK) UI component of Oracle Sun Systems Products Suite. Affected version is prior to 8.7.13. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise AK, potentially yielding unauthorized access to dat...