Code injection

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun Z...

CVE-2017-10004

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2017-10013

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun Z...

CVE-2017-10016

CVE-2017-10016 affects the Sun ZFS Storage Appliance Kit (AK) UI in Oracle Sun Systems Products Suite, affected AK 2013. An unauthenticated attacker with network access via HTTP can compromise AK, with user interaction required; successful attacks can lead to takeover of the AK. CVSSv3 base score...

CVE-2017-10042

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: IKE. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via IKE to compromise Solaris. Successful attacks of this...

CVE-2017-10004

CVE-2017-10004 concerns the Solaris kernel in Oracle Sun Systems Products Suite, affecting Solaris 10 and 11. The evidence (NVD description and Nessus plugin entries) indicates a vulnerability in the Kernel subcomponent that allows a high-privileged user with logon to compromise Solaris, with the...

CVE-2017-10042

CVE-2017-10042 affects Oracle Solaris 10 and 11, specifically the IKE implementation in the Solaris component of Oracle Sun Systems Products Suite. The vulnerability is exploitable over the network with no authentication required via IKE, potentially allowing an attacker to cause a hang or freque...

CVE-2017-10016

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun Z...

CVE-2017-10062

CVE-2017-10062 affects the Solaris component of Oracle Sun Systems Suite, specifically the Oracle Java Web Console subcomponent. The vulnerability is in Solaris 10 (x86 and SPARC) and allows a low-privilege attacker with logon to the system to compromise Solaris, leading to unauthorized updates/d...

CVE-2017-3632

CVE-2017-3632 affects Solaris SPP (SunOS) CDE Calendar, with affected versions 10 and 11. The vulnerability is exploitable over TCP with no authentication, enabling an attacker to take over Solaris (high impact on confidentiality, integrity, availability). The connected documents corroborate the ...

CVE-2017-10095

The CVE-2017-10095 vulnerability affects Oracle Solaris (Kernel subcomponent) on Solaris 11. The issue is locally exploitable with logon access and requires user interaction; impact is potential unauthorized updates/deletes to Solaris data, with CVSSv3.0 base score 3.3 (I = LOW). Public details i...

CVE-2017-10122

The CVE-2017-10122 issue affects Oracle Solaris (Kernel) in Sun Systems Products Suite on Solaris 10 and 11. It is a local, high-privilege vulnerability where exploitation requires user interaction and logon to the Solaris host, potentially enabling unauthorized update/insert/delete of Solaris da...

CVE-2017-10013

CVE-2017-10013 affects the Sun ZFS Storage Appliance Kit (AK) UI in Oracle Sun Systems Products Suite, AK 2013. An unauthenticated attacker with network access via HTTP can compromise the AK UI; attacks require user interaction and may affect additional products, with high impact (CVSSv3 8.3). No...

CVE-2017-10234

CVE-2017-10234 affects Oracle Solaris Cluster 4 (NAS device addition). The vulnerability allows a low-privileged attacker who can log on to the infrastructure where Solaris Cluster executes to compromise the cluster, with exploitation requiring user interaction. Successful attacks can lead to tak...

CVE-2017-10003

Affected software: Oracle Solaris (Solaris 10 on x86 and SPARC). Component: Network Services Library of the Sun Systems Products Suite. Root cause / vulnerability detail: Local vulnerability that allows a low-privileged user with logon to the Solaris host to access or modify Solaris data (unautho...

CVE-2017-10234

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: NAS device addition. The supported version that is affected is 4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris Cluster executes to...

CVE-2017-10003

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Network Services Library. The supported version that is affected is 10. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise...

CVE-2017-10234

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: NAS device addition. The supported version that is affected is 4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris Cluster executes to...

CVE-2017-10062

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Oracle Java Web Console. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise...

CVE-2017-10036

CVE-2017-10036 is a vulnerability in the Solaris component of Oracle Sun Systems Products Suite (NFSv4) affecting Solaris 10 and 11. The issue allows an unauthenticated attacker with network access via NFSv4 to compromise Solaris, with the impact described as a hang or a frequently repeatable cra...