Medium severity5.3NVD Advisory· Published Jul 18, 2018· Updated Jun 17, 2026
CVE-2018-2905
CVE-2018-2905
Description
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services). The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Sun ZFS Storage Appliance Kit (AK) accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected products
3cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:*:*:*:*:*:*:*:*range: <8.7.20
- (no CPE)range: <8.7.20
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
3- www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/104842nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1041303nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.