Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 2.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpujan2024.html | Patch Vendor Advisory |
| https://www.oracle.com/security-alerts/cpujan2024.html | Patch Vendor Advisory |
Configurations
History
03 Jun 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
20 Jan 2024, 18:41
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Oracle zfs Storage Appliance Kit
Oracle |
|
| References | () https://www.oracle.com/security-alerts/cpujan2024.html - Patch, Vendor Advisory | |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:* |
16 Jan 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-16 22:15
Updated : 2025-06-03 19:15
NVD link : CVE-2024-20914
Mitre link : CVE-2024-20914
JSON object : View
Products Affected
oracle
- zfs_storage_appliance_kit
CWE