CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-2905

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services). The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Sun ZFS Storage Appliance Kit (AK) accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 70.2%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2018-2905

Oracle » Sun Zfs Storage Appliance Kit » Version: N/A

cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:-
Oracle » Sun Zfs Storage Appliance Kit » Version: 8.6

cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:8.6
Oracle » Sun Zfs Storage Appliance Kit » Version: 8.7.0

cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:8.7.0
Oracle » Sun Zfs Storage Appliance Kit » Version: 8.7.13

cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:8.7.13
Oracle » Sun Zfs Storage Appliance Kit » Version: 8.7.16

cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:8.7.16
Oracle » Sun Zfs Storage Appliance Kit » Version: 8.7.17

cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:8.7.17
Oracle » Sun Zfs Storage Appliance Kit » Version: 8.7.18

cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:8.7.18

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-2905

Products

Pricing

Contact Us