Sun Zfs Storage Appliance Kit vulnerabilities | LiveThreat CVE Feed

Product

Sun Zfs Storage Appliance Kit

by Oracle · last CVE Jan 20, 2026

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities34 In the news0 Timeline

Severity mix

Critical 4High 9Medium 17Low 4

Severity

All severities34 Critical4 High9 Medium17 Low4

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Sun Zfs Storage Appliance Kit to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-2611	10.0	2%	Jan 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services) Affected: before 8.7.13
CVE-2019-9636	9.8	8%	Mar 8	Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization Affected: 8.8.6
CVE-2018-2623	9.3	2%	Jan 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface) Affected: before 8.7.13
CVE-2018-2664	9.0	2%	Jan 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface) Affected: before 8.7.13
CVE-2018-2624	8.6	2%	Jan 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface) Affected: before 8.7.13
CVE-2017-3580	8.3	2%	Apr 24	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems) Affected: ak_2013
CVE-2018-3057	8.2	0%	Jul 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks) Affected: before 8.7.18
CVE-2016-5503	8.2	0%	Oct 25	Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality, integrity,… Affected: ak_2013
CVE-2017-3584	7.8	0%	Apr 24	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems) Affected: ak_2013
CVE-2018-2918	7.5	2%	Jul 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks) Affected: before 8.7.18
CVE-2017-3621	7.5	3%	Apr 24	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: IPC Frameworks) Affected: ak_2013
CVE-2018-2920	7.4	1%	Jul 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks) Affected: before 8.7.19
CVE-2016-5492	7.1	0%	Oct 25	Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and… Affected: ak_2013
CVE-2019-2412	6.4	0%	Jan 16	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Object Store) Affected: before 8.8.2
CVE-2018-2857	6.3	1%	Apr 19	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems) Affected: before 8.7.17
CVE-2019-2878	6.1	1%	Jul 23	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems) Affected: 8.8.3
CVE-2023-22130	5.9	1%	Oct 17	Vulnerability in the Sun ZFS Storage Appliance product of Oracle Systems (component: Core) Affected: 8.8.60
CVE-2018-2921	5.8	2%	Jul 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface) Affected: before 8.7.18
CVE-2018-2924	5.7	0%	Jul 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks) Affected: before 8.7.18
CVE-2016-5486	5.5	0%	Oct 25	Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality via vectors… Affected: ak_2013
CVE-2018-17189	5.3	20%	Jan 30	In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server… Affected: 8.8.6
CVE-2018-15473	5.3	99%	Aug 17	OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has… Affected: 8.8.6
CVE-2018-2937	5.3	1%	Jul 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface) Affected: before 8.7.19
CVE-2018-2917	5.3	3%	Jul 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks) Affected: before 8.7.18
CVE-2018-2905	5.3	2%	Jul 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services) Affected: before 8.7.20
CVE-2018-2858	5.3	2%	Apr 19	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems) Affected: before 8.7.17
CVE-2017-15906	5.3	3%	Oct 26	The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files Affected: 8.8.6
CVE-2017-3585	5.3	2%	Apr 24	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface subsystem) Affected: ak_2013
CVE-2018-2863	5.0	1%	Apr 19	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks) Affected: before 8.7.17
CVE-2018-2927	4.3	1%	Jul 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems) Affected: before 8.7.18
CVE-2016-5481	3.7	1%	Oct 25	Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows remote attackers to affect confidentiality via… Affected: ak_2013
CVE-2018-2916	2.7	2%	Jul 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks) Affected: before 8.7.18
CVE-2026-21930	2.3	0%	Jan 20	Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Filesystems) Affected: 8.8.0
CVE-2018-2923	2.3	0%	Jul 18	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services) Affected: before 8.7.20