http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Solaris product of Oracle     Sun Systems Products Suite (component: Automount).
    Supported versions that are affected are 11.4 and 10.
    Difficult to exploit vulnerability allows     unauthenticated attacker with network access via NFS to     compromise Oracle Solaris. Successful attacks require     human interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of     Oracle Solaris accessible data as well as unauthorized     read access to a subset of Oracle Solaris accessible     data. (CVE-2019-2787)

Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite (component: Automount). Supported versions that are affected are 11.4 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via NFS to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data as well as unauthorized read access to a subset of Oracle Solaris accessible data.

ID	Name	Product	Family	Severity
126767	Oracle Solaris Critical Patch Update : jul2019_SRU11_4_7_5_0	Nessus	Solaris Local Security Checks	medium
126729	Solaris 10 (x86) : 150380-02	Nessus	Solaris Local Security Checks	medium
126719	Solaris 10 (sparc) : 150379-02	Nessus	Solaris Local Security Checks	medium

CVE-2019-2787

medium

Tenable Plugins

medium

medium

medium