Exploited vulnerability

CVE-2020-14871

TLP:CLEAR

Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability

Oracle Solaris and Oracle ZFS Storage Appliance Kit contain an unspecified vulnerability causing high impacts to confidentiality, integrity, and availability of affected systems.

Facts

Vendor: Oracle
Product: Solaris and Zettabyte File System (ZFS)
CVSS: 10
EPSS (probability of exploitation within 30 days): 80.2 %
On CISA's Known Exploited Vulnerabilities list since: 3 November 2021
First known exploitation: 3 November 2021
CISA's deadline for US federal agencies: 3 May 2022
Weakness: CWE-787
First seen by Risk Letters: 3 November 2021

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD