Opensolaris
Vendor:
First CVE: Jul 1, 2009 · Active for 17 years
27
Total CVEs
More Total CVEs than 96% of tracked products
13.5
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
4.7
Avg CVSS
Higher Avg CVSS than 6% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Opensolaris over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 1, 2009
17 years ago
Most Recent CVE
Oct 14, 2010
5,765 days ago
CVE Severity & Scoring
Opensolaris27 CVEs
30%
59%
11%
All CVEs352,785 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local1 (3.7%)
Network0 (0.0%)
Unknown26 (96.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (3.7%)
High0 (0.0%)
Unknown26 (96.3%)
User Interaction
None1 (3.7%)
Unknown26 (96.3%)
Required0 (0.0%)
Privileges Required
Low1 (3.7%)
High0 (0.0%)
None0 (0.0%)
Unknown26 (96.3%)
Top CVEs
Signals from CVEs in this product scope (27 CVEs).
27 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2010-3503MEDIUM Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su. | Oct 14, 2010 | 6.3 | 32 | NO | YES |
CVE-2010-0916MEDIUM Unspecified vulnerability in Oracle OpenSolaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to rdist. | Jul 13, 2010 | 6.2 | 29 | NO | YES |
CVE-2010-3578HIGH Unspecified vulnerability in Oracle OpenSolaris allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Depot Server. | Oct 14, 2010 | 9.0 | 27 | NO | NO |
CVE-2010-0083HIGH Unspecified vulnerability in Oracle OpenSolaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. | Jul 13, 2010 | 7.6 | 26 | NO | NO |
Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality and integrity, related to NFS. | Jul 13, 2010 | 3.2 | 22 | NO | YES |
CVE-2010-3577MEDIUM Unspecified vulnerability in Oracle OpenSolaris allows remote attackers to affect confidentiality and integrity, related to Kernel/CIFS. | Oct 14, 2010 | 6.4 | 21 | NO | NO |
CVE-2010-0882HIGH Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite 10 and OpenSolaris snv_134 allows local users to affect confidentiality, integrity, and availability | Apr 13, 2010 | 7.2 | 21 | NO | NO |
CVE-2010-3580MEDIUM Unspecified vulnerability in Oracle OpenSolaris allows local users to affect availability via unknown vectors related to Kernel/File System. | Oct 14, 2010 | 4.6 | 18 | NO | NO |
CVE-2010-2392MEDIUM Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect integrity and availability, related to ZFS. | Jul 13, 2010 | 5.6 | 18 | NO | NO |
CVE-2010-2386MEDIUM Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to GigaSwift Ethernet Driver. | Jul 13, 2010 | 4.9 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (27 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
3 CVEs
11.1% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (27 CVEs).
Media Mentions
Signals from CVEs in this product scope (27 CVEs).
Top CNAs Publishing CVEs For Opensolaris
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| snv_98 | 1 | 2.1 | 0.4% | 0 | 0 |
| snv_134 | 1 | 7.2 | 0.4% | 0 | 0 |
| snv_128 | 1 | 4.9 | 0.4% | 0 | 0 |
| snv_119 | 1 | 3.6 | 0.4% | 0 | 0 |
| snv_01 | 1 | 2.1 | 0.4% | 0 | 0 |
| 9 | 1 | 7.6 | 2.2% | 0 | 0 |
| 8 | 1 | 7.6 | 2.2% | 0 | 0 |
| 10 | 2 | 6.9 | 1.4% | 0 | 1 |