Oracle Sun Products Suite vulnerabilities
37 vulnerabilities
Known vulnerabilities in Oracle Sun Products Suite, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2013-0417oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Sun Storage Common Array Manager (CAM) component in Oracle Sun Products Suite 6.9.0 allows remote attackers to affect confidentiality, related to Fault Management System (FMS).CVSS5.0MediumEPSS1.22%RoutineCVE-2012-3126oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Solaris Cluster component in Oracle Sun Products Suite 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Apache Tomcat Agent.CVSS6.2MediumEPSS0.34%RoutineCVE-2012-0523oracle · sun_products_suite +2 moreoracle sun_products_suiteUnspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to sgepasswd.CVSS7.2HighEPSS0.42%RoutineCVE-2012-0516oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration Console.CVSS6.8MediumEPSS2.88%RoutineCVE-2012-0208oracle · sun_products_suite +2 moreoracle sun_products_suiteUnspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to qrsh.CVSS9.0CriticalEPSS2.93%RoutineCVE-2011-3535oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Solaris component in Oracle Sun Products Suite 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Remote Quota Server (rquotad).CVSS5.0MediumEPSS2.33%RoutineCVE-2011-3517oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 8.0 allows remote attackers to affect availability via unknown vectors related to Authentication.CVSS7.8HighEPSS3.51%RoutineCVE-2011-3507oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows remote authenticated users to affect integrity via unknown vectors related to Messaging Server.CVSS3.5LowEPSS1.37%RoutineCVE-2011-3506oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Authentication.CVSS4.3MediumEPSS1.89%RoutineCVE-2011-2327oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows local users to affect confidentiality via unknown vectors related to Delegated Administrator.CVSS2.1LowEPSS0.40%RoutineCVE-2011-2310oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Oracle Waveset component in Oracle Sun Products Suite 8.1.0 and 8.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to User Administration.CVSS7.5HighEPSS1.84%RoutineCVE-2011-2260oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration.CVSS5.8MediumEPSS3.29%RoutineCVE-2011-2245oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Solaris component in Oracle Sun Products Suite 9 and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to SSH.CVSS7.5HighEPSS2.12%RoutineCVE-2011-1511oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to Administration.CVSS6.4MediumEPSS14.65%RoutineCVE-2011-0847oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the OpenSSO Enterprise and Sun Java System Access Manager components in Oracle Sun Products Suite 7.1 and 8.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Authentication.CVSS4.0MediumEPSS1.41%RoutineCVE-2011-0844oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the OpenSSO Enterprise and Sun Java System Access Manager components in Oracle Sun Products Suite 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Authentication.CVSS4.3MediumEPSS1.45%RoutineCVE-2010-3579oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the (1) Sun Convergence 1 and (2) Sun Java Communications Suite 7 components in Oracle Sun Products Suite 1.0 and 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail.CVSS6.4MediumEPSS1.92%RoutineCVE-2010-3564oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.CVSS6.4MediumEPSS4.09%RoutineCVE-2010-3546oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Sun Java System Identity Manager component in Oracle Sun Products Suite 8.1 allows remote attackers to affect confidentiality and integrity via unknown vectors.CVSS5.8MediumEPSS1.71%RoutineCVE-2010-3545oracle · sun_products_suiteoracle sun_products_suiteUnspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration.CVSS5.8MediumEPSS1.71%