Oracle Sun ZFS Storage Appliance Kit vulnerabilities

34 CVEs affecting Oracle Sun ZFS Storage Appliance Kit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21930, published 2026-01-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-15473, published 2018-08-17. Medium severity, CVSS 5.3. EPSS: 98.6% chance of exploitation in the next 30 days. OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed,…
CVE-2018-17189, published 2019-01-30. Medium severity, CVSS 5.3. EPSS: 20.1% chance of exploitation in the next 30 days. In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up…
CVE-2019-9636, published 2019-03-08. Critical severity, CVSS 9.8. EPSS: 7.7% chance of exploitation in the next 30 days. Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure…
CVE-2017-15906, published 2017-10-26. Medium severity, CVSS 5.3. EPSS: 3.4% chance of exploitation in the next 30 days. The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
CVE-2018-2917, published 2018-07-18. Medium severity, CVSS 5.3. EPSS: 2.7% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18.…
CVE-2017-3621, published 2017-04-24. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: IPC Frameworks). The supported version that is affected is AK 2013. Easily…
CVE-2018-2918, published 2018-07-18. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18.…
CVE-2018-2611, published 2018-01-18. Critical severity, CVSS 10.0. EPSS: 2.3% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services). The supported version that is affected is Prior to 8.7.13. Easily…
CVE-2018-2921, published 2018-07-18. Medium severity, CVSS 5.8. EPSS: 2.1% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is Prior to 8.7.18.…
CVE-2018-2905, published 2018-07-18. Medium severity, CVSS 5.3. EPSS: 2.1% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services). The supported version that is affected is Prior to 8.7.20. Easily…

Latest

CVE-2026-21930, published 2026-01-20. Low severity, CVSS 2.3. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Filesystems). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high…
CVE-2023-22130, published 2023-10-17. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance product of Oracle Systems (component: Core). The supported version that is affected is 8.8.60. Difficult to exploit vulnerability allows…
CVE-2019-2878, published 2019-07-23. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems). The supported version that is affected is 8.8.3.…
CVE-2019-2412, published 2019-01-16. Medium severity, CVSS 6.4. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Object Store). The supported version that is affected is prior to 8.8.2.…
CVE-2018-3057, published 2018-07-18. High severity, CVSS 8.2. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18.…
CVE-2018-2937, published 2018-07-18. Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is Prior to 8.7.19.…
CVE-2018-2927, published 2018-07-18. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems). The supported version that is affected is Prior to…