CVE-2018-2905

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services). The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Sun ZFS Storage Appliance Kit (AK). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Sun ZFS Storage Appliance Kit (AK) accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/104842Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041303Third Party Advisory, VDB Entry
• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/104842Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041303Third Party Advisory, VDB Entry

Published

Jul 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-2899Vulnerability in the Oracle FLEXCUBE Universal Banking compo…
• CVE-2018-2900Vulnerability in the BI Publisher component of Oracle Fusion…
• CVE-2018-2901Vulnerability in the Solaris component of Oracle Sun Systems…
• CVE-2018-2902Vulnerability in the Oracle WebLogic Server component of Ora…
• CVE-2018-2903Vulnerability in the Solaris component of Oracle Sun Systems…
• CVE-2018-2904Vulnerability in the Oracle Communications EAGLE LNP Applica…
• CVE-2018-2906Vulnerability in the Hardware Management Pack component of O…
• CVE-2018-2907Vulnerability in the Hyperion Financial Reporting component …
• CVE-2018-2908Vulnerability in the Solaris component of Oracle Sun Systems…
• CVE-2018-2909Vulnerability in the Oracle VM VirtualBox component of Oracl…
• CVE-2018-2911Vulnerability in the Oracle GlassFish Server component of Or…
• CVE-2018-2912Vulnerability in the Oracle GoldenGate component of Oracle G…