Sun - vulnerabilities (CVEs)
1603 CVEs in 214 products, 0 in the last 30 days, newest from 2021-12-01.
Products
- Sunos - 561 CVEs
- Solaris - 450 CVEs
- Jre - 423 CVEs
- Jdk - 392 CVEs
- Sdk - 126 CVEs
- Opensolaris - 113 CVEs
- Java System Web Server - 32 CVEs
- Java System Application Server - 22 CVEs
- Java System Identity Manager - 19 CVEs
- Java System Directory Server - 18 CVEs
- Openjdk - 16 CVEs
- Java System Access Manager - 15 CVEs
- Ray Server Software - 15 CVEs
- Java - 14 CVEs
- Java Se - 14 CVEs
- Cobalt Raq 2 - 12 CVEs
- Cobalt Raq 3i - 12 CVEs
- One Application Server - 12 CVEs
- One Web Server - 12 CVEs
- Java System Web Proxy Server - 11 CVEs
- Staroffice - 10 CVEs
- Cluster - 8 CVEs
- J2se - 7 CVEs
- Ehrd - 6 CVEs
- Java System Portal Server - 6 CVEs
- One Directory Server - 6 CVEs
- Solaris Answerbook2 - 6 CVEs
- Cobalt Raq 4 - 5 CVEs
- Iplanet Messaging Server - 5 CVEs
- Java Desktop System - 5 CVEs
- Java System Communications Express - 5 CVEs
- Java Web Start - 5 CVEs
- Openoffice.org - 5 CVEs
- Solstice Adminsuite - 5 CVEs
- Virtualbox - 5 CVEs
- Chilisoft - 4 CVEs
- Grid Engine - 4 CVEs
- Iplanet Directory Server - 4 CVEs
- Iplanet Web Server - 4 CVEs
- Java Asp Server - 4 CVEs
- Java Plug-in - 4 CVEs
- Java System Calendar Server - 4 CVEs
- Java Web Console - 4 CVEs
- Javamail - 4 CVEs
- N1 Grid Engine - 4 CVEs
- Nfs - 4 CVEs
- One Messaging Server - 4 CVEs
- Solstice Backup - 4 CVEs
- Cobalt Raq - 3 CVEs
- Crypto Accelerator 4000 - 3 CVEs
- J2ee - 3 CVEs
- Java Enterprise System - 3 CVEs
- Java System Messaging Server - 3 CVEs
- Jsse - 3 CVEs
- Management+center - 3 CVEs
- One Calendar Server - 3 CVEs
- Secure Global Desktop - 3 CVEs
- Storedge 6130 Arrays - 3 CVEs
- Storedge Enterprise Backup Software - 3 CVEs
- Sun Fire - 3 CVEs
- Embedded Lights Out Manager - 2 CVEs
- Fire X2100 M2 - 2 CVEs
- Fire X2200 M2 - 2 CVEs
- I-runbook - 2 CVEs
- Iplanet Certificate Management System - 2 CVEs
- Java System Content Delivery Server - 2 CVEs
- Java System Identity Server - 2 CVEs
- Management Center - 2 CVEs
- Net Connect Software - 2 CVEs
- Netra T5220 Server - 2 CVEs
- Openwindows - 2 CVEs
- Solaris Pc Netlink - 2 CVEs
- Sparc Enterprise Server T5120 - 2 CVEs
- Sparc Enterprise Server T5140 - 2 CVEs
- Sparc Enterprise Server T5220 - 2 CVEs
- Sparc Enterprise Server T5240 - 2 CVEs
- Virtual Desktop Infrastructure - 2 CVEs
- Xvm Virtualbox - 2 CVEs
- Blade 6000 Modular System With Chassis - 1 CVEs
- Blade 6048 Modular System With Chassis - 1 CVEs
- Blade 8000 Modular System - 1 CVEs
- Blade 8000p Modular System - 1 CVEs
- Blade T6300 Server - 1 CVEs
- Blade T6320 Server - 1 CVEs
- Blade T6320 Server Module - 1 CVEs
- Blade X6220 With Server Module Software - 1 CVEs
- Blade X6250 With Server Module Software - 1 CVEs
- Blade X6450 With Server Module Software - 1 CVEs
- Blade X8400 - 1 CVEs
- Blade X8420 - 1 CVEs
- Blade X8440 - 1 CVEs
- Blade X8450 - 1 CVEs
- Chainkey Java Code Protection - 1 CVEs
- Change Manager - 1 CVEs
- Cobalt Raq Xtr - 1 CVEs
- Dtmail - 1 CVEs
- Enterprise Authentication Mechanism - 1 CVEs
- Enterprise Storage Manager - 1 CVEs
- Extended System Control Facility Xcp 1040 - 1 CVEs
- Fire Enterprise Server T1000 - 1 CVEs
- Fire Enterprise Server T2000 - 1 CVEs
- Fire X2250 Server - 1 CVEs
- Fire X4100 Server - 1 CVEs
- Fire X4100m2 Server - 1 CVEs
- Fire X4140 Server - 1 CVEs
- Fire X4150 Server - 1 CVEs
- Fire X4200 Server - 1 CVEs
- Fire X4200m2 Server - 1 CVEs
- Fire X4240 Server - 1 CVEs
- Fire X4250 Server - 1 CVEs
- Fire X4440 Server - 1 CVEs
- Fire X4450 Server - 1 CVEs
- Fire X4500 Server - 1 CVEs
- Fire X4540 Server - 1 CVEs
- Fire X4600 Server - 1 CVEs
- Fire X4600m2 Server - 1 CVEs
- Forte - 1 CVEs
- Hotjava Browser - 1 CVEs
- Integrated Lights-out Manager - 1 CVEs
- Iplanet Messaging Server Messenger Express - 1 CVEs
- J2me - 1 CVEs
- Java Access Manager - 1 CVEs
- Java Active Server - 1 CVEs
- Java Active Server Pages - 1 CVEs
- Java Communications Services Delegated Administrator - 1 CVEs
- Java Dynamic Management Kit - 1 CVEs
- Java Embedding Plugin - 1 CVEs
- Java Platform Micro Edition - 1 CVEs
- Java Runtime Environment - 1 CVEs
- Java Se Development Kit - 1 CVEs
- Java Studio Enterprise - 1 CVEs
- Java System Access Manager Policy Agent - 1 CVEs
- Java System Delegated Administrator - 1 CVEs
- Java System Directory Proxy Server - 1 CVEs
- Java System Messenger Express - 1 CVEs
- Java System Web Server Plugin - 1 CVEs
- Java Virtual Machine - 1 CVEs
- Java Wireless Toolkit For Cldc - 1 CVEs
- Javaserver Web Dev Kit - 1 CVEs
- Jmf - 1 CVEs
- Jsf - 1 CVEs
- Lightweight Availability Collection Tool - 1 CVEs
- Linux - 1 CVEs
- Logical Domain Manager - 1 CVEs
- N1 Service Provisioning System - 1 CVEs
- N1 System Manager - 1 CVEs
- Netbeans Developer - 1 CVEs
- Netdynamics - 1 CVEs
- Netra - 1 CVEs
- Netra 1280 - 1 CVEs
- Netra Cp3060 Server - 1 CVEs
- Netra T2000 Server - 1 CVEs
- Netra X4200m2 Server - 1 CVEs
- Netra X4250 Server - 1 CVEs
- Netra X4450 - 1 CVEs
- Nss - 1 CVEs
- One Administration Server - 1 CVEs
- Opensso Enterprise - 1 CVEs
- Patch Manager - 1 CVEs
- Patchpro - 1 CVEs
- Ray Windows Connector - 1 CVEs
- Rpc.ruserd - 1 CVEs
- Rte - 1 CVEs
- Scapp - 1 CVEs
- Seam - 1 CVEs
- Service Tag - 1 CVEs
- Snmp Management Agent - 1 CVEs
- Solaris Isp Server - 1 CVEs
- Solaris Libfont - 1 CVEs
- Solaris Libxfont - 1 CVEs
- Solstice X.25 - 1 CVEs
- Sparc - 1 CVEs
- Sparc Enterprise Server - 1 CVEs
- Sparc Enterprise Server T1000 - 1 CVEs
- Sparc Enterprise Server T2000 - 1 CVEs
- Sparc Enterprise Server T5440 - 1 CVEs
- Starsuite - 1 CVEs
- Storage Automated Diagnostic Environment - 1 CVEs
- Storagetek 3510 - 1 CVEs
- Storedge - 1 CVEs
- Storedge 3310 Scsi Array - 1 CVEs
- Storedge 3510 Fc Array - 1 CVEs
- Storedge Qfs - 1 CVEs
- Storedge Sam-qfs - 1 CVEs
- Storeedge Performance Suite - 1 CVEs
- Storeedge Utilization Suite - 1 CVEs
- Sun Fire Server - 1 CVEs
- Sun Ftp - 1 CVEs
- Sun Pci Ii Driver - 1 CVEs
- Sunforum - 1 CVEs
- Sunone Starter Kit - 1 CVEs
- Sunvts - 1 CVEs
- Wbem Services - 1 CVEs
- Web-based Enterprise Management - 1 CVEs
- Wireless Toolkit - 1 CVEs
- Woodstock - 1 CVEs
- Workshop - 1 CVEs
- Extended System Control Facility - 0 CVEs
- Extended System Control Facility Xcp - 0 CVEs
- Ipmitool - 0 CVEs
- J2ee Sdk - 0 CVEs
- Java Auto Updater - 0 CVEs
- Java Db - 0 CVEs
- Java System Ldap Jdk - 0 CVEs
- Javafx Sdk - 0 CVEs
- Libattach - 0 CVEs
- Mysql Connector/j - 0 CVEs
- Mysql Connector C - 0 CVEs
- Openoffice.org Installer - 0 CVEs
- Secure Global Desktop Client - 0 CVEs
- Service Tags - 0 CVEs
- Solaris Gigabit Ethernet Driver - 0 CVEs
- Sunpci Ii Driver Software - 0 CVEs
- Ultrasparc - 0 CVEs
Newest CVEs of Sun
- CVE-2021-43359 - CVSS 8.8 (high), 2021-12-01: Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page after being authenticated as a general…
- CVE-2021-43358 - CVSS 7.5 (high), 2021-12-01: Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks without authentication,…
- CVE-2021-43360 - CVSS 8.8 (high), 2021-12-01: Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated…
- CVE-2020-10509 - CVSS 6.1 (medium), 2020-03-27: Sunnet eHRD, a human training and development management system, contains vulnerability of Cross-Site Scripting (XSS), attackers can inject arbitrary command…
- CVE-2020-10510 - CVSS 8.1 (high), 2020-03-27: Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific…
- CVE-2020-10508 - CVSS 7.5 (high), 2020-03-27: Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a specific URL and capture confidential…
- CVE-2016-1291 - CVSS 9.8 (critical), 2016-04-06: Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via…
- CVE-2016-1290 - CVSS 8.1 (high), 2016-04-06: The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to…
- CVE-2015-6313 - CVSS 7.5 (high), 2016-04-06: Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and Virtual Machine…
- CVE-2016-1314 - CVSS 6.1 (medium), 2016-03-28: Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (CDM) 8.1(1) allows remote authenticated users to inject arbitrary web…
- CVE-2016-1350 - CVSS 7.5 (high), 2016-03-26: Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device…
- CVE-2016-1349 - CVSS 7.5 (high), 2016-03-26: The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service…
- CVE-2016-1348 - CVSS 7.5 (high), 2016-03-26: Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 Relay…
- CVE-2016-1344 - CVSS 5.9 (medium), 2016-03-26: The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (device reload) via…
- CVE-2015-0718 - CVSS 7.5 (high), 2016-03-03: Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms allows remote attackers to…
- CVE-2016-1329 - CVSS 9.8 (critical), 2016-03-03: Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded…
- CVE-2016-1331 - CVSS 6.1 (medium), 2016-02-15: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 11.5(0.99833.5) allow remote attackers to inject arbitrary web script or HTML…
- CVE-2016-1319 - CVSS 5.3 (medium), 2016-02-09: Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager…
- CVE-2016-1302 - CVSS 8.8 (high), 2016-02-07: Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with…
- CVE-2016-1310 - CVSS 6.1 (medium), 2016-02-06: Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 11.5(0.199) allows remote attackers to inject arbitrary web script or HTML via a crafted…
- CVE-2016-1306 - CVSS 6.1 (medium), 2016-02-06: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0) allow remote attackers to inject arbitrary web script or HTML via a crafted…
- CVE-2015-6319 - CVSS 9.8 (critical), 2016-01-27: SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a…
- CVE-2015-0430 - CVSS 1.9 (low), 2015-01-21: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality via vectors related to RPC Utility.
- CVE-2015-0429 - CVSS 3.3 (low), 2015-01-21: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect integrity and availability via vectors related to RPC Utility.
- CVE-2015-0428 - CVSS 4.9 (medium), 2015-01-21: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Resource Control.
- CVE-2015-0397 - CVSS 2.1 (low), 2015-01-21: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to File System, a different…
- CVE-2015-0375 - CVSS 5 (medium), 2015-01-21: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect confidentiality via unknown vectors related to Network.
- CVE-2014-6600 - CVSS 4.9 (medium), 2015-01-21: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to File System, a different…
- CVE-2014-6575 - CVSS 5 (medium), 2015-01-21: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect availability via unknown vectors related to Network, a different…
- CVE-2014-6570 - CVSS 4.9 (medium), 2015-01-21: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to File System, a different…
