Oracle Solaris Cluster vulnerabilities

14 CVEs affecting Oracle Solaris Cluster, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-6950, published 2021-06-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10086, published 2019-08-20. High severity, CVSS 7.3. EPSS: 28.4% chance of exploitation in the next 30 days. In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all…
CVE-2019-17195, published 2019-10-15. Critical severity, CVSS 9.8. EPSS: 11.1% chance of exploitation in the next 30 days. Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential…
CVE-2021-29425, published 2021-04-13. Medium severity, CVSS 4.8. EPSS: 10.5% chance of exploitation in the next 30 days. In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly…
CVE-2020-6950, published 2021-06-02. Medium severity, CVSS 6.5. EPSS: 10.1% chance of exploitation in the next 30 days. Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
CVE-2018-2930, published 2018-07-18. Critical severity, CVSS 9.8. EPSS: 3.2% chance of exploitation in the next 30 days. Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). Supported versions that are affected are 3.3 and 4.3. Easily exploitable…
CVE-2017-3588, published 2017-10-19. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: HA for MySQL). Supported versions that are affected are 3.3 and 4.3. Easily exploitable…
CVE-2017-10234, published 2017-08-08. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). The supported version that is affected is 4. Easily exploitable vulnerability…
CVE-2018-2822, published 2018-04-19. Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: Cluster Geo). The supported version that is affected is 4.3. Easily exploitable vulnerability allows…
CVE-2016-3480, published 2016-07-21. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.3 allows local users to affect confidentiality via vectors related to HA for Postgresql.
CVE-2016-0417, published 2016-01-21. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.2 allows local users to affect confidentiality, integrity, and availability via vectors…

Latest

CVE-2016-5551, published 2017-04-24. Low severity, CVSS 2.8. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). The supported version that is affected is 4.3. Easily "exploitable"…
CVE-2016-5525, published 2016-10-25. Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.3 allows local users to affect integrity via vectors related to Cluster check files.