Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-4395

25
FAUCET Score

CVE-2007-4395 describes multiple unspecified vulnerabilities within the Role Based Access Control (RBAC) functionality of Sun Solaris 8. This flaw allows remote attackers, if they possess a valid role password, to escalate privileges through that role. With a CVSS score of 7.6, this vulnerability is considered highly severe, indicating a network-based attack with high impact on confidentiality, integrity, and availability, albeit with high access complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, though it has garnered significant community discussion with 10 mentions.

Impacted Technologies

VendorProductVersion(s)CPE
5.8CPE matchmatch criteria
cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.6HIGH

AV:N/AC:H/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Exploitability Score
4.9
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
2.24%
Probability of exploitation in next 30 days
EPSS Percentile
81.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0224 is in the 38th percentile among its peer group of 8,920 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

osvdb.org / 36614
secunia.com / advisories/26494
PatchVendor Advisory
exchange.xforce.ibmcloud.com / vulnerabilities/36080
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1941
sunsolve.sun.com / search/document.do
PatchVendor Advisory
securityfocus.com / bid/25353
Patch
securitytracker.com / id
vupen.com / english/advisories/2007/2916
Vendor Advisory