Oracle Sun Products Suite vulnerabilities

37 CVEs affecting Oracle Sun Products Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-0417, published 2013-01-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-1511, published 2011-07-20. Medium severity, CVSS 6.4. EPSS: 14.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to…
CVE-2010-3514, published 2010-10-14. Medium severity, CVSS 4.3. EPSS: 4.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown…
CVE-2010-0888, published 2010-04-13. High severity, CVSS 10.0. EPSS: 4.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Sun Ray Server Software component in Oracle Sun Product Suite 4.0, 4.1, and 4.2 allows remote attackers to affect confidentiality, integrity, and availability via…
CVE-2010-3564, published 2010-10-14. Medium severity, CVSS 6.4. EPSS: 4.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality…
CVE-2011-3517, published 2011-10-18. High severity, CVSS 7.8. EPSS: 3.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 8.0 allows remote attackers to affect availability via unknown vectors related to Authentication.
CVE-2011-2260, published 2011-07-20. Medium severity, CVSS 5.8. EPSS: 3.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to…
CVE-2012-0208, published 2012-05-03. High severity, CVSS 9.0. EPSS: 2.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows remote authenticated users to affect confidentiality, integrity, and availability via…
CVE-2010-0897, published 2010-04-13. High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the Sun Java System Directory Server component in Oracle Sun Product Suite 5.2, 6.0, 6.1, 6.2, 6.3, and 6.3.1 allows remote attackers to affect confidentiality,…
CVE-2012-0516, published 2012-05-03. Medium severity, CVSS 6.8. EPSS: 2.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown…
CVE-2010-0894, published 2010-04-13. Medium severity, CVSS 5.8. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Sun Java System Access Manager component in Oracle Sun Product Suite 7.1, 7 2005Q4, and OpenSSO Enterprise 8.0 allows remote attackers to affect confidentiality and…

Latest

CVE-2013-0417, published 2013-01-17. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Sun Storage Common Array Manager (CAM) component in Oracle Sun Products Suite 6.9.0 allows remote attackers to affect confidentiality, related to Fault Management…
CVE-2012-3126, published 2012-07-17. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Products Suite 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to…
CVE-2012-0523, published 2012-05-03. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors…
CVE-2011-3535, published 2011-10-18. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Solaris component in Oracle Sun Products Suite 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Remote Quota…
CVE-2011-3507, published 2011-10-18. Low severity, CVSS 3.5. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows remote authenticated users to affect integrity via unknown vectors related to…
CVE-2011-3506, published 2011-10-18. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Authentication.
CVE-2011-2327, published 2011-10-18. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows local users to affect confidentiality via unknown vectors related to Delegated…