Oracle » Solaris : Vulnerability Statistics

Vulnerabilities (523) CVSS Scores Report Browse all versions Possible matches for this product Related Metasploit Modules

Vulnerability Trends Over Time

Year	# of Vulnerabilities	DoS	Code Execution	Overflow	Memory Corruption	Sql Injection	XSS	Directory Traversal	Http Response Splitting	Bypass something	Gain Information	Gain Privileges	CSRF	File Inclusion	# of exploits
2004	2	1
2008	1	1
2009	1	1
2010	21
2011	11	1
2012	1	1
2013	16	2	1	1	1		1			1	3
2014	65	21	12	9	3		1	2		5	5	1			1
2015	169	67	23	31	8		4		1	5	6	3
2016	88	21	4	13						2	4
2017	25	6		2							1
2018	37	9	2							1
2019	28	7					1			1
2020	26	5	1								1
2021	6	2
2022	18	4
2023	7	1
Total	522	150	43	56	12		7	2	1	15	20	4			1
% Of All		28.7	8.2	10.7	2.3	0.0	1.3	0.4	0.2	2.9	3.8	0.8	0.0	0.0

Warning : Vulnerabilities with publish dates before 1999 are not included in this table and chart. (Because there are not many of them and they make the page look bad; and they may not be actually published in those years.)

Vulnerabilities By Year
2	1	1	21	11	1	16	65	169	88	25	37	28	26	6	18	7		2004 2 2008 1 2009 1 2010 21 2011 11 2012 1 2013 16 2014 65 2015 169 2016 88 2017 25 2018 37 2019 28 2020 26 2021 6 2022 18 2023 7

Vulnerabilities By Type
150	43	56	12	7	15	20	2	4	1		Denial of Service 150 Execute Code 43 Overflow 56 Memory Corruption 12 XSS 7 Bypass Something 15 Gain Information 20 Directory Traversal 2 Gain Privilege 4 Http Response Splitting 1

Click on legend names to show/hide lines for vulnerability types
If you can't see MS Office style charts above then it's time to upgrade your browser!
P.S: Charts may not be displayed properly especially if there are only a few data points.

This page lists vulnerability statistics for all versions of Oracle Solaris. Vulnerability statistics provide a quick overview for security vulnerabilities of this software. You can view versions of this product or security vulnerabilities related to Oracle Solaris.

CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.