https://www.oracle.com/security-alerts/cpuapr2022.html

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Kernel). The supported version that     is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks of this     vulnerability can result in unauthorized access to     critical data or complete access to all Oracle Solaris     accessible data. CVSS 3.1 Base Score 5.5     (Confidentiality impacts). CVSS Vector:
    (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
    (CVE-2022-21461)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Kernel). The supported version that     is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5     (Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    (CVE-2022-21463)

CVE-2022-21461

medium

Tenable Plugins

medium