Known vulnerabilities in Oracle Solaris 11 - page 2

Vendor: Oracle
Version: 11
Software CPE: cpe:2.3:o:oracle:solaris:*:*:*:*:*:*:*:*
Total vulnerabilities: 165
Public exploits: 11
Known exploited (KEV): 3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Solaris version 11 Oracle Solaris 11 is affected by 165 vulnerabilities: 1 critical, 20 high, 38 medium, 106 low Critical High Medium Low

Vulnerabilities (165)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96700 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40030
CWE-79 Low
No
No
11.4 SRU 71 02.09.2024 SB2023082454
SB2024090228
SB2024071831
and 2 more
#VU94555 - Improper input validation
CVE-2024-21147
CWE-20 Medium
No
No
11.4 SRU 71 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU93118 - Use of Potentially Dangerous Function
CVE-2024-39331
CWE-676 High
No
No
11.4 SRU 71 24.06.2024 SB2024062429
SB2024062430
SB2024062431
and 46 more
#VU92195 - NULL Pointer Dereference
CVE-2023-45918
CWE-476 Medium
No
No
11.4 SRU 71 18.06.2024 SB2024061808
SB2024061809
SB2024080107
and 5 more
#VU91160 - Improper input validation
CVE-2024-24790
CWE-20 Medium
No
No
11.4 SRU 71 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU90121 - Integer overflow
CVE-2024-5197
CWE-190 High
No
No
11.4 SRU 71 31.05.2024 SB2024053145
SB2024060640
SB2024061506
and 14 more
#VU89735 - Integer overflow
CVE-2024-4453
CWE-190 High
No
No
11.4 SRU 71 22.05.2024 SB2024052221
SB2024052942
SB2024060419
and 14 more
#VU89295 - Untrusted Search Path
CVE-2024-24787
CWE-426 Medium
No
No
11.4 SRU 71 09.05.2024 SB2024050936
SB2024050937
SB2024050938
and 12 more
#VU88533 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-32487
CWE-78 Medium
No
No
11.4 SRU 71 15.04.2024 SB2024041531
SB2024041533
SB2024042949
and 63 more
#VU88115 - Heap-based Buffer Overflow
CVE-2024-31080
CWE-122 Low
No
No
11.4 SRU 71 04.04.2024 SB2024040412
SB2024040418
SB2024040419
and 46 more
#VU87846 - Improper input validation
CVE-2024-2004
CWE-20 Low
No
No
11.4 SRU 71 27.03.2024 SB2024032713
SB2024032740
SB2024032748
and 28 more
#VU87807 - Use of Potentially Dangerous Function
CVE-2024-30202
CWE-676 High
No
No
11.4 SRU 71 26.03.2024 SB2024032628
SB2024032629
SB2024032630
and 6 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757
CWE-611 Medium
No
No
11.4 SRU 71 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 75 more
#VU87189 - Stack-based buffer overflow
CVE-2024-22667
CWE-121 High
No
No
11.4 SRU 71 07.03.2024 SB2024030722
SB2024030729
SB2024031839
and 14 more
#VU87163 - Memory corruption
CVE-2024-25580
CWE-119 Medium
No
No
11.4 SRU 71 06.03.2024 SB2024030642
SB2024030649
SB2024030650
and 15 more
#VU85267 - Covert Timing Channel
CVE-2023-5388
CWE-385 Medium
No
No
11.3 ESU 36.33, 11.4 SRU 68, 11.4 SRU 71 10.01.2024 SB2024011031
SB2024011042
SB2024011043
and 96 more
#VU83316 - Information Exposure Through Timing Discrepancy
CVE-2023-5981
CWE-208 Medium
No
No
11.4 SRU 71 20.11.2023 SB2023112075
SB2023112145
SB2023120164
and 79 more
#VU78930 - Incorrect Default Permissions
CVE-2023-38497
CWE-276 Low
Public exploit available
No
11.4 SRU 71 03.08.2023 SB2023080354
SB2023080355
SB2023080365
and 16 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361
CWE-326 Medium
No
No
11.4 SRU 71 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU66124 - NULL Pointer Dereference
CVE-2021-4209
CWE-476 Medium
No
No
11.4 SRU 71 05.08.2022 SB2022080508
SB2022080509
SB2022080528
and 11 more


Showing elements 21 - 40 out of 165