Oracle Opensolaris vulnerabilities

27 CVEs affecting Oracle Opensolaris, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-3580, published 2010-10-14.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-3578, published 2010-10-14. High severity, CVSS 9.0. EPSS: 2.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle OpenSolaris allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Depot Server.
• CVE-2010-0083, published 2010-07-13. High severity, CVSS 7.6. EPSS: 2.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle OpenSolaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
• CVE-2010-3577, published 2010-10-14. Medium severity, CVSS 6.4. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle OpenSolaris allows remote attackers to affect confidentiality and integrity, related to Kernel/CIFS.
• CVE-2010-3503, published 2010-10-14. Medium severity, CVSS 6.3. EPSS: 0.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su.
• CVE-2010-2383, published 2010-07-13. Low severity, CVSS 3.2. EPSS: 0.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality and integrity, related to NFS.
• CVE-2010-0916, published 2010-07-13. Medium severity, CVSS 6.2. EPSS: 0.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle OpenSolaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to rdist.
• CVE-2010-0890, published 2010-04-13. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite 10 and OpenSolaris snv_01 through snv_98 allows local users to affect availability via unknown vectors related to the…
• CVE-2010-0882, published 2010-04-13. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite 10 and OpenSolaris snv_134 allows local users to affect confidentiality, integrity, and availability via unknown vectors…
• CVE-2010-0895, published 2010-04-13. Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite OpenSolaris snv_119 allows local users to affect integrity and availability via unknown vectors related to IP Filter.
• CVE-2010-0889, published 2010-04-13. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite OpenSolaris snv_68 through snv_128 allows local users to affect confidentiality via unknown vectors related to the…

Latest

• CVE-2010-3580, published 2010-10-14. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle OpenSolaris allows local users to affect availability via unknown vectors related to Kernel/File System.
• CVE-2010-3576, published 2010-10-14. Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect integrity and availability, related to the SCSI enclosure services device driver.
• CVE-2010-3542, published 2010-10-14. Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality, related to USB.
• CVE-2010-3540, published 2010-10-14. Medium severity, CVSS 4.0. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to ZFS.
• CVE-2010-3517, published 2010-10-14. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to Kernel/X86.
• CVE-2010-3516, published 2010-10-14. Medium severity, CVSS 4.0. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to InfiniBand.
• CVE-2010-3515, published 2010-10-14. Medium severity, CVSS 4.0. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Solaris component in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to Kernel/Disk Driver.
• CVE-2010-3513, published 2010-10-14. Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect integrity and availability via unknown vectors related to Device Drivers.