Vulnerabilities > Oracle > SUN ZFS Storage Appliance KIT > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-07-18 CVE-2018-2905 Unspecified vulnerability in Oracle SUN ZFS Storage Appliance KIT
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services).
network
low complexity
oracle
5.3
2018-04-19 CVE-2018-2863 Unspecified vulnerability in Oracle SUN ZFS Storage Appliance KIT
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks).
network
low complexity
oracle
5.0
2018-04-19 CVE-2018-2858 Unspecified vulnerability in Oracle SUN ZFS Storage Appliance KIT
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems).
network
low complexity
oracle
5.3
2018-04-19 CVE-2018-2857 Unspecified vulnerability in Oracle SUN ZFS Storage Appliance KIT
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems).
network
low complexity
oracle
6.3
2017-10-26 CVE-2017-15906 Incorrect Permission Assignment for Critical Resource vulnerability in multiple products
The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
network
low complexity
openbsd oracle debian netapp redhat CWE-732
5.3
2017-04-24 CVE-2017-3585 Unspecified vulnerability in Oracle SUN ZFS Storage Appliance KIT Ak2013
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface subsystem).
network
low complexity
oracle
5.3
2016-10-25 CVE-2016-5486 Information Management Errors vulnerability in Oracle SUN ZFS Storage Appliance KIT Ak2013
Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality via vectors related to Core Services.
local
low complexity
oracle CWE-199
5.5