5.3
Medium
CVE-2026-101597 Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core)
Description
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
CVSS 3.1 detail
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitable remotely over the network, without an account and without any user action; the impact on data or service is limited.
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- None
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle ZFS Storage Appliance Kit | 8.8 | No fix stated |
Other CVEs of Oracle ZFS Storage Appliance Kit
The 12 CVEs of Oracle ZFS Storage Appliance Kit →
CVE-2026-91527
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core)
8.8
High
CVE-2026-21930
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Filesystems)
2.3
Low
CVE-2025-62480
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Naming Subsystem)
2.7
Low
CVE-2025-62479
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Block Storage)
2.7
Low