Known vulnerabilities in Oracle Solaris - page 3

Vendor: Oracle
Software CPE: cpe:2.3:o:oracle:solaris:*:*:*:*:*:*:*:*
Total vulnerabilities: 1146
Public exploits: 64
Known exploited (KEV): 12

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Solaris Oracle Solaris is affected by 1146 known vulnerabilities: 8 critical, 237 high, 504 medium, 397 low Critical High Medium Low

Vulnerabilities (1146)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119965 - Use After Free
CVE-2025-12105
CWE-416 Low
No
No
11.3 ESU 36.35, 11.4 SRU 89 15.12.2025 SB2025121536
SB2025121537
SB2025121553
and 8 more
#VU119414 - Improper input validation
CVE-2025-14325
CWE-20 High
No
No
11.3 ESU 36.35, 11.4 SRU 89 09.12.2025 SB2025120939
SB20251210189
SB20251210190
and 41 more
#VU119411 - Improper input validation
CVE-2025-14324
CWE-20 High
No
No
11.3 ESU 36.35, 11.4 SRU 89 09.12.2025 SB2025120939
SB20251210189
SB20251210190
and 41 more
#VU119410 - Improper Privilege Management
CVE-2025-14323
CWE-269 Medium
No
No
11.3 ESU 36.35, 11.4 SRU 89 09.12.2025 SB2025120939
SB20251210189
SB20251210190
and 41 more
#VU119409 - Memory corruption
CVE-2025-14322
CWE-119 High
No
No
11.3 ESU 36.35, 11.4 SRU 89 09.12.2025 SB2025120939
SB20251210189
SB20251210190
and 41 more
#VU119042 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-13372
CWE-89 Medium
No
No
11.3 ESU 36.35, 11.4 SRU 89 02.12.2025 SB2025120234
SB2025120237
SB2025121224
and 8 more
#VU117534 - Insufficient Verification of Data Authenticity
CVE-2025-11411
CWE-345 Medium
No
No
11.3 ESU 36.35, 11.4 SRU 89 22.10.2025 SB20251022156
SB20251024118
SB20251024119
and 22 more
#VU117511 - Improper input validation
CVE-2025-53068
CWE-20 Low
No
No
- 22.10.2025 SB20251022149
#VU117512 - Improper input validation
CVE-2025-53070
CWE-20 Low
No
No
- 22.10.2025 SB20251022149
#VU117239 - Out-of-bounds read
CVE-2025-9640
CWE-125 Medium
No
No
11.3 ESU 36.35, 11.4 SRU 89 15.10.2025 SB2025101595
SB20251015151
SB20251015152
and 18 more
#VU116882 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-61984
CWE-78 Low
No
No
11.3 ESU 36.35, 11.4 SRU 89 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 28 more
#VU116853 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-11626
CWE-835 Medium
No
No
11.3 ESU 36.35, 11.4 SRU 89 09.10.2025 SB2025100905
SB2025101409
SB2025101410
and 12 more
#VU114764 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-57833
CWE-89 High
Available
No
11.4 SRU 86 03.09.2025 SB2025090342
SB2025090433
SB2025090469
and 19 more
#VU114436 - Heap-based Buffer Overflow
CVE-2025-7345
CWE-122 High
No
No
11.4 SRU 86 26.08.2025 SB2025082629
SB2025082631
SB2025082632
and 23 more
#VU114024 - Resource exhaustion
CVE-2025-48989
CWE-400 Medium
No
No
11.4 SRU 86 13.08.2025 SB2025081375
SB2025081376
SB20250820127
and 49 more
#VU113802 - Heap-based Buffer Overflow
CVE-2025-54874
CWE-122 High
No
No
11.4 SRU 86 11.08.2025 SB2025081148
SB2025081159
SB2025081160
and 8 more
#VU112276 - Resource exhaustion
CVE-2025-53506
CWE-400 Medium
No
No
11.4 SRU 86 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 41 more
#VU112275 - Resource Management Errors
CVE-2025-52520
CWE-399 Medium
No
No
11.4 SRU 86 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 42 more
#VU112274 - Improper input validation
CVE-2025-52434
CWE-20 Medium
No
No
11.4 SRU 86 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 32 more
#VU27677 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-18860
CWE-74 Low
No
No
11.3 ESU 36.35, 11.4 SRU 89 11.05.2020 SB2020032011
SB2020051133
SB2020051324
and 4 more


Showing elements 41 - 60 out of 1146