Description
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Oracle | Oracle ZFS Storage Appliance Kit | 8.8 | — |
Advisories 1
- WID-SEC-2026-4091 Oracle Systems: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 20, 2026
References
- Oracle Advisory vendor-advisory