This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Kernel). The supported version that     is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks require     human interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of     Oracle Solaris accessible data and unauthorized ability     to cause a partial denial of service (partial DOS) of     Oracle Solaris. CVSS 3.1 Base Score 3.9 (Integrity and     Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L).
    (CVE-2021-2381)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the MySQL Server product of Oracle     MySQL (component: Server: Security: Encryption     (OpenSSL)). Supported versions that are affected are     5.7.33 and prior and 8.0.23 and prior. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to     compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. CVSS 3.1 Base Score 7.5     (Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
    (CVE-2021-23841)

SunOS 5.10: Install and Patch Utilities Patch.
Date this patch was last updated by Sun : Aug/01/21

SunOS 5.10_x86: Install and Patch Utilities Patch.
Date this patch was last updated by Sun : Aug/01/21

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Bind/Postinstall script for Bind package). The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component or subcomponent. Successful attack of this vulnerability can escalate attacker privileges resulting in unauthorized Operating System takeover including arbitrary code execution.

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Kernel). The supported version that     is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Oracle Solaris as well as unauthorized update,     insert or delete access to some of Oracle Solaris     accessible data. Note: This vulnerability applies to     Oracle Solaris on SPARC systems only. CVSS 3.1 Base     Score 6.1 (Integrity and Availability impacts). CVSS     Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).
    (CVE-2021-2192)

X11 6.6.2_x86: FreeType patch.
Date this patch was last updated by Sun : Apr/18/21

CDE 1.6_x86: dtsession patch.
Date this patch was last updated by Sun : Apr/18/21

CDE 1.6: dtsession patch.
Date this patch was last updated by Sun : Apr/18/21

X11 6.6.2: FreeType patch.
Date this patch was last updated by Sun : Apr/18/21

SunOS 5.10_x86: sudo Patch.
Date this patch was last updated by Sun : Feb/04/21

SunOS 5.10: sudo Patch.
Date this patch was last updated by Sun : Feb/04/21

SunOS 5.10: SunFreeware ntp patch.
Date this patch was last updated by Sun : Jan/18/21

SunOS 5.10: Apache 2.4 Patch.
Date this patch was last updated by Sun : Jan/18/21

SunOS 5.10_x86: SunFreeware ntp patch.
Date this patch was last updated by Sun : Jan/18/21

SunOS 5.10_x86: Apache 2.4 Patch.
Date this patch was last updated by Sun : Jan/18/21

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Filesystem). The supported version     that is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5     (Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    (CVE-2020-14754)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Utility). The supported version that     is affected is 11. Difficult to exploit vulnerability     allows low privileged attacker with network access via     SSH to compromise Oracle Solaris. Successful attacks     require human interaction from a person other than the     attacker and while the vulnerability is in Oracle     Solaris, attacks may significantly impact additional     products. Successful attacks of this vulnerability can     result in unauthorized update, insert or delete access     to some of Oracle Solaris accessible data. CVSS 3.1 Base     Score 3.0 (Integrity impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N).
    (CVE-2020-14818)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Pluggable authentication module).
    Supported versions that are affected are 10 and 11.
    Easily exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to     compromise Oracle Solaris. While the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in takeover of Oracle Solaris.
    CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and     Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
    (CVE-2020-14871)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Pluggable authentication module).
    Supported versions that are affected are 10 and 11.
    Easily exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to     compromise Oracle Solaris. While the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in takeover of Oracle Solaris.
    CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and     Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
    (CVE-2020-14871)

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Kernel). The supported version that     is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks require     human interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized access to critical data or complete access     to all Oracle Solaris accessible data and unauthorized     ability to cause a partial denial of service (partial     DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.6     (Confidentiality and Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:L).
    (CVE-2020-14758)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Kernel). The supported version that     is affected is 11. Difficult to exploit vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks require     human interaction from a person other than the attacker     and while the vulnerability is in Oracle Solaris,     attacks may significantly impact additional products.
    Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of     Oracle Solaris accessible data. CVSS 3.1 Base Score 2.5     (Integrity impacts). CVSS Vector:
    (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N).
    (CVE-2020-14759)

SunOS 5.10: Install and Patch Utilities Pa.
Date this patch was last updated by Sun : Oct/19/20

SunOS 5.10: libpam.so patch.
Date this patch was last updated by Sun : Oct/19/20

SunOS 5.10_x86: libpam.so patch.
Date this patch was last updated by Sun : Oct/19/20

SunOS 5.10_x86: Install and Patch Utilitie.
Date this patch was last updated by Sun : Oct/19/20

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Kernel). The supported version that     is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. While the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Oracle Solaris. Note: Please refer to <a     href='https://support.oracle.com/rs?type=doc&id=2609642.
    1'>My Oracle Support Note 2609642.1</a> for further     information on how CVE-2018-12207 impacts Oracle     Solaris. CVSS 3.1 Base Score 6.5 (Availability impacts).
    CVSS Vector:
    (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
    (CVE-2018-12207)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Kernel). The supported version that     is affected is 11. Difficult to exploit vulnerability     allows low privileged attacker with network access via     multiple protocols to compromise Oracle Solaris. While     the vulnerability is in Oracle Solaris, attacks may     significantly impact additional products. Successful     attacks of this vulnerability can result in unauthorized     read access to a subset of Oracle Solaris accessible     data. CVSS 3.1 Base Score 3.5 (Confidentiality impacts).
    CVSS Vector:
    (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N).
    (CVE-2019-5489)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Packaging Scripts). The supported     version that is affected is 11. Easily exploitable     vulnerability allows high privileged attacker with logon     to the infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks require     human interaction from a person other than the attacker     and while the vulnerability is in Oracle Solaris,     attacks may significantly impact additional products.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of Oracle Solaris. CVSS     3.1 Base Score 5.5 (Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:H).
    (CVE-2020-14537)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: libsuri). The supported version that     is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks of this     vulnerability can result in unauthorized read access to     a subset of Oracle Solaris accessible data. CVSS 3.1     Base Score 3.3 (Confidentiality impacts). CVSS Vector:
    (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
    (CVE-2020-14542)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Device Driver Utility). The     supported version that is affected is 11. Difficult to     exploit vulnerability allows low privileged attacker     with logon to the infrastructure where Oracle Solaris     executes to compromise Oracle Solaris. Successful     attacks require human interaction from a person other     than the attacker. Successful attacks of this     vulnerability can result in unauthorized creation,     deletion or modification access to critical data or all     Oracle Solaris accessible data and unauthorized ability     to cause a partial denial of service (partial DOS) of     Oracle Solaris. CVSS 3.1 Base Score 5.0 (Integrity and     Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L).
    (CVE-2020-14545)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Device Driver Utility). The     supported version that is affected is 11. Easily     exploitable vulnerability allows low privileged attacker     with logon to the infrastructure where Oracle Solaris     executes to compromise Oracle Solaris. Successful     attacks require human interaction from a person other     than the attacker. Successful attacks of this     vulnerability can result in takeover of Oracle Solaris.
    CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and     Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).
    (CVE-2020-14724)

SunOS 5.10_x86: Apache 2.4 Patch.
Date this patch was last updated by Sun : Jul/13/20

SunOS 5.10_x86: Tomcat 8 patch.
Date this patch was last updated by Sun : Jul/13/20

SunOS 5.10_x86: OpenSSL 1.0.2 patch.
Date this patch was last updated by Sun : Jul/13/20

GNOME 2.6.0_x86: Python patch.
Date this patch was last updated by Sun : Jul/13/20

SunOS 5.10_x86: Samba patch.
Date this patch was last updated by Sun : Jul/13/20

SunOS 5.10: Apache 2.4 Patch.
Date this patch was last updated by Sun : Jul/13/20

SunOS 5.10: Tomcat 8 patch.
Date this patch was last updated by Sun : Jul/13/20

SunOS 5.10: OpenSSL 1.0.2 patch.
Date this patch was last updated by Sun : Jul/13/20

GNOME 2.6.0: Python patch.
Date this patch was last updated by Sun : Jul/13/20

SunOS 5.10: Samba patch.
Date this patch was last updated by Sun : Jul/13/20

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Sun ZFS Storage Appliance Kit     product of Oracle Systems (component: Operating System     Image). The supported version that is affected is 8.8.
    Difficult to exploit vulnerability allows low privileged     attacker with logon to the infrastructure where Sun ZFS     Storage Appliance Kit executes to compromise Sun ZFS     Storage Appliance Kit. Successful attacks of this     vulnerability can result in takeover of Sun ZFS Storage     Appliance Kit. (CVE-2018-1165)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: SMF command svcbundle). The     supported version that is affected is 11. Difficult to     exploit vulnerability allows low privileged attacker     with logon to the infrastructure where Oracle Solaris     executes to compromise Oracle Solaris. Successful     attacks require human interaction from a person other     than the attacker and while the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in unauthorized update, insert     or delete access to some of Oracle Solaris accessible     data. (CVE-2020-2749)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Whodo). Supported versions that are     affected are 10 and 11. Difficult to exploit     vulnerability allows low privileged attacker with logon     to the infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks require     human interaction from a person other than the attacker     and while the vulnerability is in Oracle Solaris,     attacks may significantly impact additional products.
    Successful attacks of this vulnerability can result in     unauthorized read access to a subset of Oracle Solaris     accessible data. (CVE-2020-2771)

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Common Desktop Environment).
    Supported versions that are affected are 10 and 11.
    Difficult to exploit vulnerability allows low privileged     attacker with logon to the infrastructure where Oracle     Solaris executes to compromise Oracle Solaris. While the     vulnerability is in Oracle Solaris, attacks may     significantly impact additional products. Successful     attacks of this vulnerability can result in takeover of     Oracle Solaris. (CVE-2020-2851)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Common Desktop Environment).
    Supported versions that are affected are 10 and 11.
    Difficult to exploit vulnerability allows low privileged     attacker with logon to the infrastructure where Oracle     Solaris executes to compromise Oracle Solaris. While the     vulnerability is in Oracle Solaris, attacks may     significantly impact additional products. Successful     attacks of this vulnerability can result in takeover of     Oracle Solaris. (CVE-2020-2927)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Common Desktop Environment).
    Supported versions that are affected are 10 and 11.
    Easily exploitable vulnerability allows low privileged     attacker with logon to the infrastructure where Oracle     Solaris executes to compromise Oracle Solaris. While the     vulnerability is in Oracle Solaris, attacks may     significantly impact additional products. Successful     attacks of this vulnerability can result in takeover of     Oracle Solaris. (CVE-2020-2944)

SunOS 5.10_x86: Apache 2.4 Patch.
Date this patch was last updated by Sun : Apr/13/20

SunOS 5.10_x86: Tomcat 8 patch.
Date this patch was last updated by Sun : Apr/13/20

SunOS 5.10_x86: SunFreeware ntp patch.
Date this patch was last updated by Sun : Apr/13/20

SunOS 5.10_x86: uptime w utmp_update whodo patch.
Date this patch was last updated by Sun : Apr/13/20

CDE 1.6_x86: dtsession patch.
Date this patch was last updated by Sun : Apr/13/20

SunOS 5.10: Apache 2.4 Patch.
Date this patch was last updated by Sun : Apr/13/20

SunOS 5.10: Tomcat 8 patch.
Date this patch was last updated by Sun : Apr/13/20

ID	Name	Severity
151923	Oracle Solaris Critical Patch Update : jul2021_SRU11_4_34_94_4	low
151922	Oracle Solaris Critical Patch Update : jul2021_SRU11_3_36_26_0	medium
151901	Solaris 10 (sparc) : 153100-03	high
151893	Solaris 10 (x86) : 153101-03	high
149803	Solaris 10 (x86) : 119784-47	medium
149794	Solaris 10 (sparc) : 119783-47	medium
148933	Oracle Solaris Critical Patch Update : apr2021_SRU11_4_30_88_3	medium
148765	Solaris 10 (x86) : 119813-25	medium
148764	Solaris 10 (x86) : 125280-10	high
148760	Solaris 10 (sparc) : 125279-10	high
148754	Solaris 10 (sparc) : 119812-23	medium
146247	Solaris 10 (x86) : 152253-04	high
146233	Solaris 10 (sparc) : 152252-04	high
145192	Solaris 10 (sparc) : 143725-14	high
145191	Solaris 10 (sparc) : 152643-10	high
145172	Solaris 10 (x86) : 143726-14	high
145096	Solaris 10 (x86) : 152644-10	high
141773	Oracle Solaris Critical Patch Update : oct2020_SRU11_4_24_75_2	critical
141772	Oracle Solaris Critical Patch Update : oct2020_SRU11_3_36_23_0	critical
141771	Oracle Solaris Critical Patch Update : oct2020_SRU11_4_26_75_4	medium
141558	Solaris 10 (sparc) : 153100-01	high
141557	Solaris 10 (sparc) : 153074-01	critical
141553	Solaris 10 (x86) : 153075-01	critical
141551	Solaris 10 (x86) : 153101-01	high
140364	Solaris 10 (x86) : 119784-46	medium
140363	Solaris 10 (sparc) : 119783-46	medium
138539	Oracle Solaris Critical Patch Update : jul2020_SRU11_4_21_69_0	high
138431	Solaris 10 (x86) : 152644-09	high
138430	Solaris 10 (x86) : 152511-10	high
138429	Solaris 10 (x86) : 151913-16	high
138428	Solaris 10 (x86) : 143507-15	high
138427	Solaris 10 (x86) : 119784-45	medium
138426	Solaris 10 (x86) : 119758-45	critical
138425	Solaris 10 (sparc) : 152643-09	high
138424	Solaris 10 (sparc) : 152510-10	high
138423	Solaris 10 (sparc) : 151912-16	high
138422	Solaris 10 (sparc) : 143506-15	high
138421	Solaris 10 (sparc) : 119783-45	medium
138420	Solaris 10 (sparc) : 119757-45	critical
135669	Oracle Solaris Critical Patch Update : apr2020_SRU11_4_19_3_0	high
135668	Oracle Solaris Critical Patch Update : apr2020_SRU11_4_15_5_0	low
135667	Oracle Solaris Critical Patch Update : apr2020_SRU11_3_36_20_0	high
135445	Solaris 10 (x86) : 152644-08	high
135444	Solaris 10 (x86) : 152511-09	high
135443	Solaris 10 (x86) : 143726-13	high
135442	Solaris 10 (x86) : 142530-02	low
135441	Solaris 10 (x86) : 125280-09	high
135440	Solaris 10 (x86) : 119784-44	medium
135439	Solaris 10 (sparc) : 152643-08	high
135438	Solaris 10 (sparc) : 152510-09	high

Solaris Local Security Checks Family for Nessus

low

medium

high

high

medium

medium

medium

medium

high

high

medium

high

high

high

high

high

high

critical

critical

medium

high

critical

critical

high

medium

medium

high

high

high

high

high

medium

critical

high

high

high

high

medium

critical

high

low

high

high

high

high

low

high

medium

high

high