Known vulnerabilities in Sun ZFS Storage Appliance Kit

Vendor: Oracle
Software: Sun ZFS Storage Appliance Kit
Software CPE: cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Sun ZFS Storage Appliance Kit Sun ZFS Storage Appliance Kit is affected by 13 known vulnerabilities: 2 high, 4 medium, 7 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387		 CWE-362 High
Available
No
 - 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU121916 - Improper input validation
CVE-2023-22130		 CWE-20 Medium
No
No
 - 17.10.2023 SB20231017158
#VU35686 - Improper Access Control
CVE-2019-2878		 CWE-284 Medium
No
No
 - 24.07.2019 SB2019072472
SB20190716149
#VU18355 - Improper input validation
CVE-2019-9636		 CWE-20 Medium
No
No
 - 27.04.2019 SB2019042703
SB2019050611
SB2019051007
and 56 more
#VU17060 - Permissions, Privileges, and Access Controls
CVE-2019-2412		 CWE-264 Low
No
No
 8.8.2 17.01.2019 SB2019011707
SB2019011530
#VU13582 - Missing release of memory after effective lifetime
CVE-2018-11655		 CWE-401 Low
No
No
 - 05.07.2018 SB2018063002
SB2020042371
SB2020042372
and 1 more
#VU11917 - Permissions, Privileges, and Access Controls
CVE-2018-2863		 CWE-264 Low
No
No
 - 18.04.2018 SB2018041814
#VU11916 - Permissions, Privileges, and Access Controls
CVE-2018-2858		 CWE-264 Low
No
No
 - 18.04.2018 SB2018041814
#VU11915 - Permissions, Privileges, and Access Controls
CVE-2018-2857		 CWE-264 Low
No
No
 - 18.04.2018 SB2018041814
#VU11595 - Improper Access Control
CVE-2017-3621		 CWE-284 Low
No
No
 - 06.04.2018 SB2017041803
#VU39108 - Improper input validation
CVE-2017-3580		 CWE-20 High
No
No
 - 24.04.2017 SB2017042410
#VU39110 - Improper input validation
CVE-2017-3584		 CWE-20 Low
No
No
 - 24.04.2017 SB2017042410
#VU39111 - Improper input validation
CVE-2017-3585		 CWE-20 Medium
No
No
 - 24.04.2017 SB2017042410