CVE-2018-2921 — Vulnetix

CVE-2018-2921 PUBLISHED CVSS 5 MEDIUM

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun ZFS Storage Appliance Kit (AK). While the vulnerability is in Sun ZFS Storage Appliance Kit (AK), attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Sun ZFS Storage Appliance Kit (AK) accessible data. CVSS 3.0 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).

EPSS 0.42% · 61.5th percentile

Risk Scores

CVSS v2.0

EPSS Score

0.42%

61.5th percentile

Affected Products

Vendor	Product	Versions
oracle	sun_zfs_storage_appliance_kit	0
Oracle Corporation	Sun ZFS Storage Appliance Kit (AK) Software	unspecified

Timeline

Jul 18, 2018 CVE Published
Apr 14, 2021 EPSS Score
Jun 22, 2021 EPSS Score
Aug 23, 2021 EPSS Score
Oct 24, 2021 EPSS Score
Dec 25, 2021 EPSS Score
Feb 25, 2022 EPSS Score
Apr 28, 2022 EPSS Score
Jun 29, 2022 EPSS Score
Aug 31, 2022 EPSS Score
Nov 1, 2022 EPSS Score
Jan 2, 2023 EPSS Score

References

104783 vdb
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html url
1041303 vdb
https://nvd.nist.gov/vuln/detail/CVE-2018-2921 advisory

Open in Interactive Console →