Known vulnerabilities in Oracle Solaris

Vendor: Oracle
Software CPE: cpe:2.3:o:oracle:solaris:*:*:*:*:*:*:*:*
Total vulnerabilities: 1143
Public exploits: 64
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Solaris Oracle Solaris is affected by 1143 known vulnerabilities: 8 critical, 236 high, 504 medium, 395 low Critical High Medium Low

Vulnerabilities (1143)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126810 - Out-of-bounds read
CVE-2026-34281
CWE-125 Low
No
No
- 22.04.2026 SB20260422165
#VU121753 - Improper input validation
CVE-2026-21927
CWE-20 Low
No
No
- 20.01.2026 SB20260120201
#VU121754 - Improper input validation
CVE-2026-21935
CWE-20 Low
No
No
- 20.01.2026 SB20260120201
#VU121755 - Improper input validation
CVE-2026-21928
CWE-20 Medium
No
No
- 20.01.2026 SB20260120201
#VU121756 - Improper input validation
CVE-2026-21942
CWE-20 Low
No
No
- 20.01.2026 SB20260120201
#VU119418 - Memory corruption
CVE-2025-14333
CWE-119 High
No
No
11.3 ESU 36.35, 11.4 SRU 89 09.12.2025 SB2025120939
SB20251210189
SB20251210190
and 40 more
#VU119417 - Improper input validation
CVE-2025-14330
CWE-20 Medium
No
No
11.3 ESU 36.35, 11.4 SRU 89 09.12.2025 SB2025120939
SB20251210189
SB20251210190
and 41 more
#VU119416 - Improper Privilege Management
CVE-2025-14329
CWE-269 Medium
No
No
11.3 ESU 36.35, 11.4 SRU 89 09.12.2025 SB2025120939
SB20251210189
SB20251210190
and 41 more
#VU119412 - Protection Mechanism Failure
CVE-2025-14331
CWE-693 Medium
No
No
11.3 ESU 36.35, 11.4 SRU 89 09.12.2025 SB2025120939
SB20251210189
SB20251210190
and 41 more
#VU119149 - Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
CVE-2025-58098
CWE-97 Low
Available
No
11.3 ESU 36.35, 11.4 SRU 89 04.12.2025 SB2025120441
SB2025121923
SB2025121940
and 47 more
#VU119148 - Server-Side Request Forgery (SSRF)
CVE-2025-59775
CWE-918 Medium
No
No
11.3 ESU 36.35, 11.4 SRU 89 04.12.2025 SB2025120441
SB2026010820
SB20260114117
and 11 more
#VU119147 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-65082
CWE-74 Low
No
No
11.3 ESU 36.35, 11.4 SRU 89 04.12.2025 SB2025120441
SB2025121923
SB2025122202
and 33 more
#VU119146 - Improper input validation
CVE-2025-66200
CWE-20 Low
No
No
11.3 ESU 36.35, 11.4 SRU 89 04.12.2025 SB2025120441
SB2025121923
SB2025122202
and 31 more
#VU119108 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-13946
CWE-835 Medium
No
No
11.3 ESU 36.35, 11.4 SRU 89 03.12.2025 SB2025120343
SB2025121632
SB2025121763
and 6 more
#VU119107 - Improper input validation
CVE-2025-13945
CWE-20 Medium
No
No
11.3 ESU 36.35, 11.4 SRU 89 03.12.2025 SB2025120343
SB2026012076
SB2026021272
and 1 more
#VU119043 - Resource Management Errors
CVE-2025-64460
CWE-399 Medium
No
No
11.3 ESU 36.35, 11.4 SRU 89 02.12.2025 SB2025120234
SB2025120237
SB2025120561
and 13 more
#VU116883 - Improper Neutralization of Null Byte or NUL Character
CVE-2025-61985
CWE-158 Low
No
No
11.3 ESU 36.35, 11.4 SRU 89 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 25 more
#VU114556 - Improper input validation
CVE-2025-9817
CWE-20 Medium
No
No
11.3 ESU 36.35, 11.4 SRU 89 29.08.2025 SB2025082908
SB2025091567
SB2025091568
and 10 more
#VU107332 - Protection Mechanism Failure
CVE-2025-32728
CWE-693 Low
No
No
11.3 ESU 36.35, 11.4 SRU 89 10.04.2025 SB2025041009
SB2025041010
SB2025042478
and 14 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385
CWE-78 Medium
Available
No
11.3 ESU 36.35, 11.4 SRU 89 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more


Showing elements 1 - 20 out of 1143