Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-21104 EUVD-2024-18818GHSA-hqjp-8rmv-6c38

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected i…

Published Apr 16, 2024 · Updated Mar 13, 2025 · Assigned by oracle

Description

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H).

Affected products

VendorProductAffectedFixed
Oracle Sun ZFS Storage Appliance Kit (AK) Software 8.8 —

Advisories 1

References