Known vulnerabilities in Oracle Solaris - page 11

Vendor: Oracle
Software CPE: cpe:2.3:o:oracle:solaris:*:*:*:*:*:*:*:*
Total vulnerabilities: 1143
Public exploits: 64
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Solaris Oracle Solaris is affected by 1143 known vulnerabilities: 8 critical, 236 high, 504 medium, 395 low Critical High Medium Low

Vulnerabilities (1143)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93118 - Use of Potentially Dangerous Function
CVE-2024-39331
CWE-676 High
No
No
11.4 SRU 71 24.06.2024 SB2024062429
SB2024062430
SB2024062431
and 46 more
#VU91694 - Use After Free
CVE-2024-5688
CWE-416 High
No
No
11.4 SRU 71 11.06.2024 SB20240611267
SB20240611280
SB2024061301
and 37 more
#VU91108 - Observable discrepancy
CVE-2024-2408
CWE-203 Medium
No
No
11.4 SRU 71 05.06.2024 SB2024060501
SB2024060502
SB2024060503
and 4 more
#VU91107 - Improper input validation
CVE-2024-5458
CWE-20 Medium
No
No
11.4 SRU 71 05.06.2024 SB2024060501
SB2024060502
SB2024060503
and 18 more
#VU91106 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-4577
CWE-78 Critical
Available
Exploited
11.4 SRU 71, 11.4 SRU 77 04.06.2024 SB2024060501
SB2024060502
SB2024060503
and 12 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34064
CWE-79 Medium
No
No
11.4 SRU 71 20.05.2024 SB2024052067
SB2024052081
SB2024052082
and 83 more
#VU89490 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32004
CWE-94 High
No
No
11.4 SRU 71 15.05.2024 SB2024051503
SB2024060720
SB2024060721
and 51 more
#VU88533 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-32487
CWE-78 Medium
No
No
11.4 SRU 71 15.04.2024 SB2024041531
SB2024041533
SB2024042949
and 63 more
#VU88485 - Resource exhaustion
CVE-2024-2757
CWE-400 Medium
No
No
11.4 SRU 71 11.04.2024 SB2024041173
SB2024041175
SB2024071831
and 2 more
#VU88483 - Security Features
CVE-2024-2756
CWE-254 Low
No
No
11.4 SRU 71 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 24 more
#VU88482 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-1874
CWE-78 Medium
Available
No
11.4 SRU 71 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 7 more
#VU88153 - Resource exhaustion
CVE-2024-27316
CWE-400 Medium
Available
No
11.4 SRU 71 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709
CWE-113 Medium
No
No
11.4 SRU 71 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 62 more
#VU88115 - Heap-based Buffer Overflow
CVE-2024-31080
CWE-122 Low
No
No
11.4 SRU 71 04.04.2024 SB2024040412
SB2024040418
SB2024040419
and 46 more
#VU87680 - Uncontrolled Recursion
CVE-2024-25111
CWE-674 Medium
No
No
11.4 SRU 71 20.03.2024 SB2024032067
SB2024032078
SB2024032634
and 24 more
#VU87205 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-1931
CWE-835 Medium
No
No
11.4 SRU 71 07.03.2024 SB2024030739
SB2024032741
SB20240412134
and 5 more
#VU87189 - Stack-based buffer overflow
CVE-2024-22667
CWE-121 High
No
No
11.4 SRU 71 07.03.2024 SB2024030722
SB2024030729
SB2024031839
and 14 more
#VU87033 - Inefficient Regular Expression Complexity
CVE-2024-27351
CWE-1333 Medium
No
No
11.4 SRU 71 04.03.2024 SB2024030431
SB2024030441
SB2024030442
and 21 more
#VU85842 - Heap-based Buffer Overflow
CVE-2024-0911
CWE-122 High
No
No
11.4 SRU 71 26.01.2024 SB2024012645
SB2024012649
SB2024012650
and 4 more
#VU65825 - Permissions, Privileges, and Access Controls
CVE-2022-32744
CWE-264 Low
No
No
11.4 SRU 71 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 20 more


Showing elements 201 - 220 out of 1143