CVE-2020-2565

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Consolidation Infrastructure). The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H).

• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory

Published

Jan 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25644A memory leak flaw was found in WildFly OpenSSL in versions …7.5
• CVE-2020-25645A flaw was found in the Linux kernel in versions before 5.9-…7.5
• CVE-2020-25646A flaw was found in Ansible Collection community.crypto. ope…7.5
• CVE-2020-25647A flaw was found in grub2 in versions prior to 2.06. During …7.6
• CVE-2020-25648A flaw was found in the way NSS handled CCS (ChangeCipherSpe…7.5
• CVE-2020-25649A flaw was found in FasterXML Jackson Databind, where it did…7.5
• CVE-2020-25650A flaw was found in the way the spice-vdagentd daemon handle…5.5
• CVE-2020-25651A flaw was found in the SPICE file transfer protocol. File d…6.4
• CVE-2020-25652A flaw was found in the spice-vdagentd daemon, where it did …5.5
• CVE-2020-25653A race condition vulnerability was found in the way the spic…6.3
• CVE-2020-25654An ACL bypass flaw was found in pacemaker. An attacker havin…7.2
• CVE-2020-25655An issue was discovered in ManagedClusterView API, that coul…6.5