This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Sun ZFS Storage Appliance Kit     product of Oracle Systems (component: Operating System     Image). The supported version that is affected is 8.8.
    Difficult to exploit vulnerability allows low privileged     attacker with logon to the infrastructure where Sun ZFS     Storage Appliance Kit executes to compromise Sun ZFS     Storage Appliance Kit. Successful attacks of this     vulnerability can result in takeover of Sun ZFS Storage     Appliance Kit. (CVE-2018-1165)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: SMF command svcbundle). The     supported version that is affected is 11. Difficult to     exploit vulnerability allows low privileged attacker     with logon to the infrastructure where Oracle Solaris     executes to compromise Oracle Solaris. Successful     attacks require human interaction from a person other     than the attacker and while the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in unauthorized update, insert     or delete access to some of Oracle Solaris accessible     data. (CVE-2020-2749)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Whodo). Supported versions that are     affected are 10 and 11. Difficult to exploit     vulnerability allows low privileged attacker with logon     to the infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks require     human interaction from a person other than the attacker     and while the vulnerability is in Oracle Solaris,     attacks may significantly impact additional products.
    Successful attacks of this vulnerability can result in     unauthorized read access to a subset of Oracle Solaris     accessible data. (CVE-2020-2771)

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Common Desktop Environment).
    Supported versions that are affected are 10 and 11.
    Difficult to exploit vulnerability allows low privileged     attacker with logon to the infrastructure where Oracle     Solaris executes to compromise Oracle Solaris. While the     vulnerability is in Oracle Solaris, attacks may     significantly impact additional products. Successful     attacks of this vulnerability can result in takeover of     Oracle Solaris. (CVE-2020-2851)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Common Desktop Environment).
    Supported versions that are affected are 10 and 11.
    Difficult to exploit vulnerability allows low privileged     attacker with logon to the infrastructure where Oracle     Solaris executes to compromise Oracle Solaris. While the     vulnerability is in Oracle Solaris, attacks may     significantly impact additional products. Successful     attacks of this vulnerability can result in takeover of     Oracle Solaris. (CVE-2020-2927)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Common Desktop Environment).
    Supported versions that are affected are 10 and 11.
    Easily exploitable vulnerability allows low privileged     attacker with logon to the infrastructure where Oracle     Solaris executes to compromise Oracle Solaris. While the     vulnerability is in Oracle Solaris, attacks may     significantly impact additional products. Successful     attacks of this vulnerability can result in takeover of     Oracle Solaris. (CVE-2020-2944)

SunOS 5.10_x86: Apache 2.4 Patch.
Date this patch was last updated by Sun : Apr/13/20

SunOS 5.10_x86: Tomcat 8 patch.
Date this patch was last updated by Sun : Apr/13/20

SunOS 5.10_x86: SunFreeware ntp patch.
Date this patch was last updated by Sun : Apr/13/20

SunOS 5.10_x86: uptime w utmp_update whodo patch.
Date this patch was last updated by Sun : Apr/13/20

CDE 1.6_x86: dtsession patch.
Date this patch was last updated by Sun : Apr/13/20

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Bind/Postinstall script for Bind package). The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component or subcomponent. Successful attack of this vulnerability can escalate attacker privileges resulting in unauthorized Operating System takeover including arbitrary code execution.

SunOS 5.10: Apache 2.4 Patch.
Date this patch was last updated by Sun : Apr/13/20

SunOS 5.10: Tomcat 8 patch.
Date this patch was last updated by Sun : Apr/13/20

SunOS 5.10: SunFreeware ntp patch.
Date this patch was last updated by Sun : Apr/13/20

SunOS 5.10: uptime w utmp_update whodo patch.
Date this patch was last updated by Sun : Apr/13/20

CDE 1.6: dtsession patch.
Date this patch was last updated by Sun : Apr/13/20

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Consolidation Infrastructure). The     supported version that is affected is 11. Difficult to     exploit vulnerability allows low privileged attacker     with logon to the infrastructure where Oracle Solaris     executes to compromise Oracle Solaris. Successful     attacks require human interaction from a person other     than the attacker and while the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in takeover of Oracle Solaris.
    (CVE-2020-2565)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Filesystem). The supported version     that is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks of this     vulnerability can result in unauthorized creation,     deletion or modification access to critical data or all     Oracle Solaris accessible data and unauthorized ability     to cause a hang or frequently repeatable crash (complete     DOS) of Oracle Solaris. (CVE-2020-2605)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Filesystem). The supported version     that is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks require     human interaction from a person other than the attacker     and while the vulnerability is in Oracle Solaris,     attacks may significantly impact additional products.
    Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of     Oracle Solaris accessible data as well as unauthorized     read access to a subset of Oracle Solaris accessible     data. (CVE-2020-2664)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Filesystem). The supported version     that is affected is 11. Easily exploitable vulnerability     allows high privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. While the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Oracle Solaris. (CVE-2020-2680)

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Kernel). The supported version that     is affected is 11. Easily exploitable vulnerability     allows unauthenticated attacker with network access via     SMB to compromise Oracle Solaris. While the     vulnerability is in Oracle Solaris, attacks may     significantly impact additional products. Successful     attacks of this vulnerability can result in unauthorized     ability to cause a partial denial of service (partial     DOS) of Oracle Solaris. (CVE-2020-2558)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Kernel). The supported version that     is affected is 11. Easily exploitable vulnerability     allows unauthenticated attacker with network access via     SMB to compromise Oracle Solaris. While the     vulnerability is in Oracle Solaris, attacks may     significantly impact additional products. Successful     attacks of this vulnerability can result in unauthorized     ability to cause a partial denial of service (partial     DOS) of Oracle Solaris. (CVE-2020-2578)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: X Window System). Supported versions     that are affected are 10 and 11. Easily exploitable     vulnerability allows low privileged attacker with logon     to the infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks of this     vulnerability can result in unauthorized update, insert     or delete access to some of Oracle Solaris accessible     data as well as unauthorized read access to a subset of     Oracle Solaris accessible data. (CVE-2020-2656)

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: SMB Server). The supported version     that is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks of this     vulnerability can result in unauthorized update, insert     or delete access to some of Oracle Solaris accessible     data. (CVE-2019-9579)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Kernel). Supported versions that are     affected are 10 and 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks require     human interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of Oracle Solaris.
    (CVE-2020-2647)

SunOS 5.10_x86: sudo Patch.
Date this patch was last updated by Sun : Jan/13/20

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products.
Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data as well as unauthorized read access to a subset of Oracle Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Solaris.

X11 6.6.2_x86: xlock patch.
Date this patch was last updated by Sun : Jan/13/20

SunOS 5.10_x86: GNU patch patch.
Date this patch was last updated by Sun : Jan/13/20

GNOME 2.6.0_x86: Python patch.
Date this patch was last updated by Sun : Jan/13/20

CDE 1.6_x86: dtsession patch.
Date this patch was last updated by Sun : Jan/13/20

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: CDE Calendar). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris. Note: CVE-2017-3632 is assigned to the 'EASYSTREET' vulnerability.

SunOS 5.10: sudo Patch.
Date this patch was last updated by Sun : Jan/13/20

X11 6.6.2: xlock patch.
Date this patch was last updated by Sun : Jan/13/20

SunOS 5.10: GNU patch patch.
Date this patch was last updated by Sun : Jan/13/20

GNOME 2.6.0: Python patch.
Date this patch was last updated by Sun : Jan/13/20

CDE 1.6: dtsession patch.
Date this patch was last updated by Sun : Jan/13/20

X11 6.8.0_x86: Xorg server patch.
Date this patch was last updated by Sun : Nov/04/19

X11 6.6.2_x86: Xsun patch.
Date this patch was last updated by Sun : Nov/04/19

X11 6.8.0: Xorg server patch.
Date this patch was last updated by Sun : Nov/04/19

X11 6.6.2: Xsun patch.
Date this patch was last updated by Sun : Nov/04/19

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Filesystem). Supported versions that     are affected are 10 and 11. Difficult to exploit     vulnerability allows low privileged attacker with logon     to the infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. While the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in unauthorized update, insert     or delete access to some of Oracle Solaris accessible     data as well as unauthorized read access to a subset of     Oracle Solaris accessible data and unauthorized ability     to cause a partial denial of service (partial DOS) of     Oracle Solaris. (CVE-2019-2765)

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: SMF services & legacy daemons). The     supported version that is affected is 11. Difficult to     exploit vulnerability allows low privileged attacker     with logon to the infrastructure where Oracle Solaris     executes to compromise Oracle Solaris. Successful     attacks of this vulnerability can result in unauthorized     update, insert or delete access to some of Oracle     Solaris accessible data and unauthorized ability to     cause a partial denial of service (partial DOS) of     Oracle Solaris. (CVE-2019-2961)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: LDAP Library). The supported version     that is affected is 11. Difficult to exploit     vulnerability allows high privileged attacker with logon     to the infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. Successful attacks require     human interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a partial denial of     service (partial DOS) of Oracle Solaris. (CVE-2019-3008)

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: XScreenSaver). The supported version     that is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. While the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in takeover of Oracle Solaris.
    (CVE-2019-3010)

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Filesystem). Supported versions that     are affected are 10 and 11. Difficult to exploit     vulnerability allows low privileged attacker with logon     to the infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. While the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in unauthorized update, insert     or delete access to some of Oracle Solaris accessible     data as well as unauthorized read access to a subset of     Oracle Solaris accessible data and unauthorized ability     to cause a partial denial of service (partial DOS) of     Oracle Solaris. (CVE-2019-2765)

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: XScreenSaver). The supported version     that is affected is 11. Easily exploitable vulnerability     allows low privileged attacker with logon to the     infrastructure where Oracle Solaris executes to     compromise Oracle Solaris. While the vulnerability is in     Oracle Solaris, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in takeover of Oracle Solaris.
    (CVE-2019-3010)

SunOS 5.10_x86: wget patch.
Date this patch was last updated by Sun : Oct/14/19

SunOS 5.10_x86: Samba patch.
Date this patch was last updated by Sun : Oct/14/19

SunOS 5.10: wget patch.
Date this patch was last updated by Sun : Oct/14/19

SunOS 5.10: Samba patch.
Date this patch was last updated by Sun : Oct/14/19

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Oracle Solaris product of Oracle     Sun Systems Products Suite (component: Kernel). The     supported version that is affected is 11.4. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via ICMPv6 to compromise     Oracle Solaris. Successful attacks of this vulnerability     can result in unauthorized creation, deletion or     modification access to critical data or all Oracle     Solaris accessible data. (CVE-2019-5598)

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Sun Systems Products Suite (component: Filesystem).
    Supported versions that are affected are 11.4 and 10.
    Easily exploitable vulnerability allows low privileged     attacker with logon to the infrastructure where Oracle     Solaris executes to compromise Oracle Solaris.
    Successful attacks require human interaction from a     person other than the attacker. Successful attacks of     this vulnerability can result in takeover of Oracle     Solaris. (CVE-2019-2804)

  - Vulnerability in the Oracle Solaris product of Oracle     Sun Systems Products Suite (component: Kernel).
    Supported versions that are affected are 11.4 and 11.3.
    Easily exploitable vulnerability allows unauthenticated     attacker with network access via IPv6 to compromise     Oracle Solaris. Successful attacks of this vulnerability     can result in unauthorized creation, deletion or     modification access to critical data or all Oracle     Solaris accessible data and unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Oracle Solaris. (CVE-2019-5597)

ID	Name	Severity
135669	Oracle Solaris Critical Patch Update : apr2020_SRU11_4_19_3_0	High
135668	Oracle Solaris Critical Patch Update : apr2020_SRU11_4_15_5_0	Low
135667	Oracle Solaris Critical Patch Update : apr2020_SRU11_3_36_20_0	High
135445	Solaris 10 (x86) : 152644-08	High
135444	Solaris 10 (x86) : 152511-09	High
135443	Solaris 10 (x86) : 143726-13	High
135442	Solaris 10 (x86) : 142530-02	High
135441	Solaris 10 (x86) : 125280-09	High
135440	Solaris 10 (x86) : 119784-44	Medium
135439	Solaris 10 (sparc) : 152643-08	High
135438	Solaris 10 (sparc) : 152510-09	High
135437	Solaris 10 (sparc) : 143725-13	High
135436	Solaris 10 (sparc) : 142529-02	High
135435	Solaris 10 (sparc) : 125279-09	High
135434	Solaris 10 (sparc) : 119783-44	Medium
132998	Oracle Solaris Critical Patch Update : jan2020_SRU11_4_17_3_0	Low
132997	Oracle Solaris Critical Patch Update : jan2020_SRU11_4_16_4_0	Low
132996	Oracle Solaris Critical Patch Update : jan2020_SRU11_4_15_5_0	Low
132903	Solaris 10 (x86) : 152253-03	High
132902	Solaris 10 (x86) : 150401-68	Medium
132901	Solaris 10 (x86) : 145070-02	High
132900	Solaris 10 (x86) : 144675-02	High
132899	Solaris 10 (x86) : 143507-14	High
132898	Solaris 10 (x86) : 125280-07	High
132897	Solaris 10 (x86) : 124394-13	Critical
132896	Solaris 10 (sparc) : 152252-03	High
132895	Solaris 10 (sparc) : 150400-68	Medium
132894	Solaris 10 (sparc) : 145069-02	High
132893	Solaris 10 (sparc) : 144674-02	High
132892	Solaris 10 (sparc) : 143506-14	High
132891	Solaris 10 (sparc) : 125279-07	High
132890	Solaris 10 (sparc) : 124393-13	Critical
130511	Solaris 10 (x86) : 125720-71	Medium
130510	Solaris 10 (x86) : 119060-73	High
130509	Solaris 10 (sparc) : 125719-60	High
130508	Solaris 10 (sparc) : 119059-74	High
130009	Oracle Solaris Critical Patch Update : oct2019_SRU11_4_14_5_0	Medium
130008	Oracle Solaris Critical Patch Update : oct2019_SRU11_4_13_4_0	Low
130007	Oracle Solaris Critical Patch Update : oct2019_SRU11_4_12_5_0	Medium
130006	Oracle Solaris Critical Patch Update : oct2019_SRU11_3_36_15_0	Medium
129876	Solaris 10 (x86) : 150401-67	Medium
129875	Solaris 10 (x86) : 125216-08	Medium
129874	Solaris 10 (x86) : 119784-43	Medium
129873	Solaris 10 (x86) : 119758-44	Critical
129872	Solaris 10 (sparc) : 150400-67	Medium
129871	Solaris 10 (sparc) : 125215-08	Medium
129870	Solaris 10 (sparc) : 119783-43	Medium
129869	Solaris 10 (sparc) : 119757-44	Critical
126769	Oracle Solaris Critical Patch Update : jul2019_SRU11_4_9_5_0	Medium
126768	Oracle Solaris Critical Patch Update : jul2019_SRU11_4_8_5_0	Medium

Solaris Local Security Checks Family for Nessus