Known vulnerabilities in Oracle Solaris 11.4

Vendor: Oracle
Version: 11.4
Software CPE: cpe:2.3:o:oracle:solaris:*:*:*:*:*:*:*:*
Total vulnerabilities: 579
Public exploits: 24
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Solaris version 11.4 Oracle Solaris 11.4 is affected by 579 vulnerabilities: 3 critical, 129 high, 285 medium, 162 low Critical High Medium Low

Vulnerabilities (579)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77606 - Inconsistency Between Implementation and Documented Design
CVE-2023-30590
CWE-1068 Medium
No
No
- 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77605 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-30589
CWE-444 Medium
No
No
- 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 43 more
#VU77604 - Improper input validation
CVE-2023-30588
CWE-20 Medium
No
No
- 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77603 - Permissions, Privileges, and Access Controls
CVE-2023-30586
CWE-264 Medium
No
No
- 21.06.2023 SB2023062144
SB2023072539
SB2023082320
and 6 more
#VU77601 - Untrusted Search Path
CVE-2023-30585
CWE-426 Low
No
No
- 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 13 more
#VU77595 - Improper Access Control
CVE-2023-30587
CWE-284 Medium
No
No
- 21.06.2023 SB2023062144
SB2023072539
SB2023082320
and 7 more
#VU77352 - Heap-based Buffer Overflow
CVE-2023-32643
CWE-122 High
No
No
- 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 8 more
#VU77350 - Resource exhaustion
CVE-2023-32611
CWE-400 Medium
No
No
- 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 31 more
#VU77349 - Resource exhaustion
CVE-2023-32665
CWE-400 Medium
No
No
- 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 31 more
#VU77348 - Improper input validation
CVE-2023-32636
CWE-20 Medium
No
No
- 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 14 more
#VU77002 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-34414
CWE-451 Medium
No
No
- 06.06.2023 SB2023060653
SB2023060676
SB2023060710
and 38 more
#VU76668 - Memory corruption
CVE-2023-32763
CWE-119 High
No
No
- 30.05.2023 SB2023053068
SB2023070436
SB2023071741
and 17 more
#VU76665 - Divide By Zero
CVE-2023-32573
CWE-369 Medium
No
No
- 30.05.2023 SB2023053067
SB2023072568
SB2023072625
and 28 more
#VU76425 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-31130
CWE-124 Low
No
No
- 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 55 more
#VU76424 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31124
CWE-338 Medium
No
No
- 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 33 more
#VU76422 - Improper input validation
CVE-2023-32067
CWE-20 Medium
No
No
- 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 66 more
#VU75485 - Insufficient Verification of Data Authenticity
CVE-2023-25815
CWE-345 Low
No
No
- 25.04.2023 SB2023042553
SB2023042610
SB2023042638
and 40 more
#VU75270 - Improper input validation
CVE-2023-21912
CWE-20 Medium
No
No
- 18.04.2023 SB20230418162
SB2023050821
SB2023050824
and 11 more
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU70457 - Security Features
CVE-2022-43551
CWE-254 Medium
No
No
- 21.12.2022 SB2022122102
SB2022122620
SB2023010612
and 32 more


Showing elements 1 - 20 out of 579