Oracle Sunos vulnerabilities

18 CVEs affecting Oracle Sunos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-4239, published 2014-07-17.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-5861, published 2013-10-16. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 11.1 allows remote attackers to affect availability via vectors related to Kernel/KSSL.
• CVE-2014-4239, published 2014-07-17. Medium severity, CVSS 4.0. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Common Agent Container (Cacao).
• CVE-2014-2469, published 2014-04-17. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in lighttpd in Oracle Solaris 11.1 allows attackers to cause a denial of service via unknown vectors.
• CVE-2013-5863, published 2013-10-16. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 11.1 allows remote attackers to affect integrity via vectors related to IPS repository daemon.
• CVE-2013-3837, published 2013-10-16. Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows remote attackers to affect availability via unknown vectors related to Cacao.
• CVE-2013-5821, published 2014-01-15. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11.1 allows local users to affect confidentiality, integrity, and availability via vectors related to RPC.
• CVE-2013-5862, published 2013-10-16. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to CPU performance counters (CPC) drivers, a different vulnerability than…
• CVE-2013-5864, published 2013-10-16. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to USB hub driver.
• CVE-2013-5876, published 2014-01-15. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2014-0447.
• CVE-2013-5872, published 2014-01-15. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to Name Service Cache Daemon (NSCD).

Latest

• CVE-2014-4224, published 2014-07-17. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11.1 allows local users to affect availability via unknown vectors related to sockfs.
• CVE-2014-4215, published 2014-07-17. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to CPU performance counters (CPC) drivers, a different vulnerability than…
• CVE-2014-0447, published 2014-04-16. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2013-5876.
• CVE-2014-0442, published 2014-04-16. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 9, 10, and 11.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Print Filter Utility.
• CVE-2013-5885, published 2014-01-15. Low severity, CVSS 1.7. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect integrity via unknown vectors related to Audit.
• CVE-2013-5875, published 2014-01-15. Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect integrity and availability via vectors related to Role Based Access Control (RBAC).