Oracle Sun ZFS Storage Appliance Kit Software vulnerabilities

4 CVEs affecting Oracle Sun ZFS Storage Appliance Kit Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3909, published 2020-04-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3909, published 2020-04-01. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for…
CVE-2017-10013, published 2017-08-08. High severity, CVSS 8.3. EPSS: 1.9% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is AK 2013. Difficult to…
CVE-2017-10016, published 2017-08-08. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is AK 2013. Difficult to…
CVE-2017-3578, published 2017-04-24. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems). The supported version that is affected is AK 2013. Easily…