GCVE - cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:x64:*

Approved changes feed: RSS · Atom

cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:x64:*

part: o version: - update: *

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Solaris (`9d6e2d17-3f23-54cd-8e08-2919feb4b8b3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	x64
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/oracle/oraclesolaris-contrib`	purl2cpe	2026-06-01 10:18:13.880018

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-25256`	not_vulnerable	2026-06-08 05:41:45.631846	Details available SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfs_request_backlabel_list and saspfs_request_backurl_list. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing the button, e.g., a malicious web page. In addition, the second parameter executes JavaScript, which means XSS is possible by adding a javascript: URL. Published: 2022-02-19T00:17:15.000Z Updated: 2024-08-03T04:36:06.574Z Open on db.gcve.eu Reference links https://sas.com https://github.com/RobertDra/CVE-2022-25256 https://support.sas.com/kb/62/972.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-14678`	not_vulnerable	2026-06-08 05:12:55.877376	Details available SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways. Examples are Local File Reading, Out Of Band File Exfiltration, Server Side Request Forgery, and/or Potential Denial of Service attacks. This vulnerability also affects the XMLV2 LIBNAME engine when the AUTOMAP option is used. Published: 2019-11-14T20:59:44.000Z Updated: 2024-08-05T00:19:41.422Z Open on db.gcve.eu Reference links https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-14678-Unsafe%20XML%20Parsing-SAS%20XML%20Mapper http://support.sas.com/kb/64/719.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20733`	not_vulnerable	2026-06-08 05:11:27.801008	Details available BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE. Published: 2019-01-17T01:00:00.000Z Updated: 2024-08-05T12:12:29.175Z Open on db.gcve.eu Reference links http://support.sas.com/kb/62/987.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20732`	not_vulnerable	2026-06-08 05:11:27.800008	Details available SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant. Published: 2019-01-17T01:00:00.000Z Updated: 2024-08-05T12:12:28.610Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/106648 https://support.sas.com/kb/63/391.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-9281`	not_vulnerable	2026-06-08 05:07:13.516288	Details available Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page. Published: 2019-01-17T01:00:00.000Z Updated: 2024-08-06T08:43:42.395Z Open on db.gcve.eu Reference links http://support.sas.com/kb/55/537.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.