Oracle · Solaris
CVE-2019-3010
Oracle Solaris Privilege Escalation Vulnerability
Cos'è
Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
CISA: Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation.
Cosa fare
Apply updates per vendor instructions.
Scadenza per le agenzie federali USA: 15 giugno 2022
Altre falle sfruttate di Oracle
| Aggiunto | Vulnerabilità | Prodotto | Gravità | Probabilità di attacco |
|---|---|---|---|---|
| 24 ago 2026 | Improper Access Control | HTTP Server and Oracle Weblogic Server Proxy Plug-in | Critica 10,0 | 73% |
| 15 lug 2026 | Improper Privilege Management | E-Business Suite | Critica 9,8 | 12% |
| 12 giu 2026 | PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function | PeopleSoft Enterprise PeopleTools | Critica 9,8 | 97% |
| 1 giu 2026 | Unspecified | WebLogic Server | Alta 7,5 | 74% |
| 21 nov 2025 | Missing Authentication for Critical Function | Fusion Middleware | Critica 9,8 | 89% |
| 20 ott 2025 | Server-Side Request Forgery (SSRF) | E-Business Suite | Alta 7,5 | 96% |
| 6 ott 2025 | Unspecified | E-Business Suite | Critica 9,8 | 99,7% |
| 24 feb 2025 | Deserialization | Agile Product Lifecycle Management (PLM) | Alta 8,8 | 3,9% |
Fonti: Known Exploited Vulnerabilities (CISA, pubblico dominio), CVE records (cve.org) e EPSS (FIRST). La probabilità di attacco è la stima EPSS che qualcuno provi a sfruttare la falla nei prossimi 30 giorni.