Oracle · Solaris
CVE-2019-3010
Oracle Solaris Privilege Escalation Vulnerability
Nedir
Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
CISA: Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation.
Ne yapmalı
Apply updates per vendor instructions.
ABD federal kurumları için son tarih: 15 Haziran 2022
Oracle için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 24 Ağu 2026 | Improper Access Control | HTTP Server and Oracle Weblogic Server Proxy Plug-in | Kritik 10,0 | 73% |
| 15 Tem 2026 | Improper Privilege Management | E-Business Suite | Kritik 9,8 | 12% |
| 12 Haz 2026 | PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function | PeopleSoft Enterprise PeopleTools | Kritik 9,8 | 97% |
| 1 Haz 2026 | Unspecified | WebLogic Server | Yüksek 7,5 | 74% |
| 21 Kas 2025 | Missing Authentication for Critical Function | Fusion Middleware | Kritik 9,8 | 89% |
| 20 Eki 2025 | Server-Side Request Forgery (SSRF) | E-Business Suite | Yüksek 7,5 | 96% |
| 6 Eki 2025 | Unspecified | E-Business Suite | Kritik 9,8 | 99,7% |
| 24 Şub 2025 | Deserialization | Agile Product Lifecycle Management (PLM) | Yüksek 8,8 | 3,9% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.