[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1doTlgmANt-DwsUk0fOczvCESbvF2apfkEcZRyNijYY":3,"g5a-family:oracle\u002Fsolaris":216,"g5a-ex:oracle\u002Fsolaris@*":226},{"success":4,"data":5},true,{"product":6,"versions":55,"topVulnerabilitiesByEpss":69,"kevVulnerabilities":134,"seoMetadata":194,"meta":213},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":54},"oracle","solaris",13,749,11,"2025-10-21",[14,18,23,27,30,33,36,39,42,44,46,48,51],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},"10",120,3,{"version":19,"cve_count":20,"kev_count":21,"has_kev":22},"10.0",27,0,false,{"version":24,"cve_count":25,"kev_count":26,"has_kev":4},"11",117,2,{"version":28,"cve_count":29,"kev_count":21,"has_kev":22},"11.1",1,{"version":31,"cve_count":32,"kev_count":21,"has_kev":22},"11.2",79,{"version":34,"cve_count":35,"kev_count":17,"has_kev":4},"11.3",285,{"version":37,"cve_count":38,"kev_count":21,"has_kev":22},"11.4",7,{"version":40,"cve_count":41,"kev_count":21,"has_kev":22},"11_express",5,{"version":43,"cve_count":29,"kev_count":21,"has_kev":22},"2.5.1",{"version":45,"cve_count":26,"kev_count":21,"has_kev":22},"2.6",{"version":47,"cve_count":26,"kev_count":21,"has_kev":22},"7.0",{"version":49,"cve_count":50,"kev_count":21,"has_kev":22},"8",17,{"version":52,"cve_count":53,"kev_count":29,"has_kev":4},"9",21,"Solaris by Oracle is a technology product with 13 tracked versions and 749 known security vulnerabilities including 11 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[56,57,58,59,60,61,62,63,64,65,66,67,68],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},{"version":19,"cve_count":20,"kev_count":21,"has_kev":22},{"version":24,"cve_count":25,"kev_count":26,"has_kev":4},{"version":28,"cve_count":29,"kev_count":21,"has_kev":22},{"version":31,"cve_count":32,"kev_count":21,"has_kev":22},{"version":34,"cve_count":35,"kev_count":17,"has_kev":4},{"version":37,"cve_count":38,"kev_count":21,"has_kev":22},{"version":40,"cve_count":41,"kev_count":21,"has_kev":22},{"version":43,"cve_count":29,"kev_count":21,"has_kev":22},{"version":45,"cve_count":26,"kev_count":21,"has_kev":22},{"version":47,"cve_count":26,"kev_count":21,"has_kev":22},{"version":49,"cve_count":50,"kev_count":21,"has_kev":22},{"version":52,"cve_count":53,"kev_count":29,"has_kev":4},[70,78,85,91,98,105,111,118,123,128],{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":75,"severity":76,"isKev":4,"epssScore":77},"CVE-2013-2251","Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.","2013-07-20",9.8,"v3.1","Critical",0.99998,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":75,"severity":83,"isKev":4,"epssScore":84},"CVE-2011-0611","Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a \"group of included constants,\" object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.","2011-04-13",8.8,"High",0.9941,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":75,"severity":83,"isKev":4,"epssScore":90},"CVE-2008-2992","Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.","2008-11-04",7.8,0.98482,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":96,"severity":76,"isKev":22,"epssScore":97},"CVE-2007-0882","Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client \"-f\" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.","2007-02-12",10,"v2",0.98055,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"cvssVersion":75,"severity":103,"isKev":22,"epssScore":104},"CVE-2017-5753","Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.","2018-01-04",5.6,"Medium",0.93838,{"cveId":106,"description":107,"publishedDate":108,"cvssScore":109,"cvssVersion":75,"severity":83,"isKev":4,"epssScore":110},"CVE-2012-0754","Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.","2012-02-16",8.1,0.91085,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":115,"cvssVersion":116,"severity":83,"isKev":22,"epssScore":117},"CVE-2016-2776","buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.","2016-09-28",7.5,"v3.0",0.89482,{"cveId":119,"description":120,"publishedDate":121,"cvssScore":41,"cvssVersion":96,"severity":103,"isKev":22,"epssScore":122},"CVE-2004-0230","TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.","2004-08-18",0.80286,{"cveId":124,"description":125,"publishedDate":126,"cvssScore":95,"cvssVersion":75,"severity":76,"isKev":4,"epssScore":127},"CVE-2020-14871","Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. Note: This CVE is not exploitable for Solaris 11.1 and later releases, and ZFSSA 8.7 and later releases, thus the CVSS Base Score is 0.0. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2020-10-21",0.80157,{"cveId":129,"description":130,"publishedDate":131,"cvssScore":132,"cvssVersion":75,"severity":103,"isKev":4,"epssScore":133},"CVE-2016-3718","The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.","2016-05-05",5.5,0.7565,[135,144,147,154,163,170,174,178,181,185,191],{"cveId":136,"description":137,"publishedDate":138,"cvssScore":89,"severity":83,"isKev":4,"epssScore":139,"cisaVulnName":140,"cisaDateAdded":141,"cisaShortDescription":142,"cisaRequiredAction":143},"CVE-2011-0609","Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.","2011-03-15",0.63507,"Adobe Flash Player Unspecified Vulnerability","2022-06-08","Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":106,"description":107,"publishedDate":108,"cvssScore":109,"severity":83,"isKev":4,"epssScore":110,"cisaVulnName":145,"cisaDateAdded":141,"cisaShortDescription":146,"cisaRequiredAction":143},"Adobe Flash Player Memory Corruption Vulnerability","Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":148,"description":149,"publishedDate":108,"cvssScore":150,"severity":103,"isKev":4,"epssScore":151,"cisaVulnName":152,"cisaDateAdded":141,"cisaShortDescription":153,"cisaRequiredAction":143},"CVE-2012-0767","Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Universal XSS (UXSS),\" as exploited in the wild in February 2012.",6.1,0.06187,"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.",{"cveId":155,"description":156,"publishedDate":157,"cvssScore":82,"severity":83,"isKev":4,"epssScore":158,"cisaVulnName":159,"cisaDateAdded":160,"cisaShortDescription":161,"cisaRequiredAction":162},"CVE-2015-4495","The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.","2015-08-08",0.68558,"Mozilla Firefox Security Feature Bypass Vulnerability","2022-05-25","Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.","Apply updates per vendor instructions.",{"cveId":164,"description":165,"publishedDate":166,"cvssScore":82,"severity":83,"isKev":4,"epssScore":167,"cisaVulnName":168,"cisaDateAdded":160,"cisaShortDescription":169,"cisaRequiredAction":162},"CVE-2019-3010","Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2019-10-16",0.13399,"Oracle Solaris Privilege Escalation Vulnerability","Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation.",{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"severity":76,"isKev":4,"epssScore":77,"cisaVulnName":171,"cisaDateAdded":172,"cisaShortDescription":173,"cisaRequiredAction":162},"Apache Struts Improper Input Validation Vulnerability","2022-03-25","Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.",{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"severity":83,"isKev":4,"epssScore":90,"cisaVulnName":175,"cisaDateAdded":176,"cisaShortDescription":177,"cisaRequiredAction":162},"Adobe Reader and Acrobat Input Validation Vulnerability","2022-03-03","Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.",{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"severity":83,"isKev":4,"epssScore":84,"cisaVulnName":179,"cisaDateAdded":176,"cisaShortDescription":180,"cisaRequiredAction":143},"Adobe Flash Player Remote Code Execution Vulnerability","Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.",{"cveId":129,"description":130,"publishedDate":131,"cvssScore":132,"severity":103,"isKev":4,"epssScore":133,"cisaVulnName":182,"cisaDateAdded":183,"cisaShortDescription":184,"cisaRequiredAction":162},"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","2021-11-03","ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.",{"cveId":186,"description":187,"publishedDate":131,"cvssScore":132,"severity":103,"isKev":4,"epssScore":188,"cisaVulnName":189,"cisaDateAdded":183,"cisaShortDescription":190,"cisaRequiredAction":162},"CVE-2016-3715","The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.",0.75307,"ImageMagick Arbitrary File Deletion Vulnerability","ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.",{"cveId":124,"description":125,"publishedDate":126,"cvssScore":95,"severity":76,"isKev":4,"epssScore":127,"cisaVulnName":192,"cisaDateAdded":183,"cisaShortDescription":193,"cisaRequiredAction":162},"Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability","Oracle Solaris and Oracle ZFS Storage Appliance Kit contain an unspecified vulnerability causing high impacts to confidentiality, integrity, and availability of affected systems.",{"title":195,"metaDescription":196,"keywords":197,"structuredData":198},"Solaris by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Solaris by Oracle covering 13 versions with 749 tracked vulnerabilities including 2 critical and 6 high-severity issues and 11 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Solaris vulnerabilities, Solaris security, Solaris CVE, Oracle Solaris, Solaris threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Solaris KEV, Solaris exploited vulnerabilities",{"@context":199,"@type":200,"name":201,"description":196,"url":202,"manufacturer":203,"applicationCategory":207,"softwareVersion":208,"mainEntity":209},"https:\u002F\u002Fschema.org","SoftwareApplication","Solaris","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fsolaris",{"@type":204,"name":205,"url":206},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","13 versions tracked",{"@type":210,"name":211,"description":212,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Solaris Security Vulnerabilities","Security vulnerabilities affecting Solaris by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":214,"apiVersion":215},"2026-10-17T11:48:11.525Z","3.0",[217,220,222,224],{"product":218,"cves":219},"solaris_cluster",14,{"product":221,"cves":29},"solaris_ak",{"product":223,"cves":29},"solaris_sparc",{"product":225,"cves":29},"solaris_studio",{"rows":227,"total":11,"capped":22,"failed":21},[228,232,236,240,244,248,252,256,260,264,268],{"cveId":136,"name":140,"severity":83,"cvss":89,"added":141,"epss":139,"published":229,"ranges":230,"checked":4,"hits":231,"covers":22},"2011-03-15T17:55:03.827",[],[],{"cveId":106,"name":145,"severity":83,"cvss":109,"added":141,"epss":110,"published":233,"ranges":234,"checked":4,"hits":235,"covers":22},"2012-02-16T19:55:01.13",[],[],{"cveId":148,"name":152,"severity":103,"cvss":150,"added":141,"epss":151,"published":237,"ranges":238,"checked":4,"hits":239,"covers":22},"2012-02-16T19:55:01.303",[],[],{"cveId":155,"name":159,"severity":83,"cvss":82,"added":160,"epss":158,"published":241,"ranges":242,"checked":4,"hits":243,"covers":22},"2015-08-08T00:59:04.597",[34],[],{"cveId":164,"name":168,"severity":83,"cvss":82,"added":160,"epss":167,"published":245,"ranges":246,"checked":4,"hits":247,"covers":22},"2019-10-16T18:15:34.293",[24],[],{"cveId":71,"name":171,"severity":76,"cvss":74,"added":172,"epss":77,"published":249,"ranges":250,"checked":4,"hits":251,"covers":22},"2013-07-20T03:37:30.737",[],[],{"cveId":86,"name":175,"severity":83,"cvss":89,"added":176,"epss":90,"published":253,"ranges":254,"checked":4,"hits":255,"covers":22},"2008-11-04T18:29:47.667",[15],[],{"cveId":79,"name":179,"severity":83,"cvss":82,"added":176,"epss":84,"published":257,"ranges":258,"checked":4,"hits":259,"covers":22},"2011-04-13T14:55:01.217",[],[],{"cveId":129,"name":182,"severity":103,"cvss":132,"added":183,"epss":133,"published":261,"ranges":262,"checked":4,"hits":263,"covers":22},"2016-05-05T18:59:08.96",[15,34],[],{"cveId":186,"name":189,"severity":103,"cvss":132,"added":183,"epss":188,"published":265,"ranges":266,"checked":4,"hits":267,"covers":22},"2016-05-05T18:59:04.727",[15,34],[],{"cveId":124,"name":192,"severity":76,"cvss":95,"added":183,"epss":127,"published":269,"ranges":270,"checked":4,"hits":272,"covers":22},"2020-10-21T15:15:24.593",[52,271],"10 to before 11.1",[]]