CVE-2020-14871 — Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability

provenance: imported · CVE: CVE-2020-14871 · CWE: CWE-787

CVE-2020-14871: Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Oracle
Product	Solaris and Zettabyte File System (ZFS)
Date added	2021-11-03
Due date	2022-05-03
Ransomware campaign use	Unknown

Description

Oracle Solaris and Oracle ZFS Storage Appliance Kit contain an unspecified vulnerability causing high impacts to confidentiality, integrity, and availability of affected systems.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-14871

Weakness behind it

CISA records this vulnerability as an instance of CWE-787. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-14871
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

See all 1,745 pages under Vulnerabilities (CVE) →

Browse by topic

Every page in the corpus, grouped. Search finds one page; this shows what else is here.