CVE Tools

Sun

1,570 CVEs tracked since 1999. Since Feb 2008, 2 of them reached CISA KEV.

Sun CVEs per month

Feb 2008 to Dec 2021. Point at a month, or focus the strip and use the arrow keys.
Sun CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2008-0280
2008-03220
2008-0470
2008-0580
2008-06180
2008-07150
2008-08130
2008-0940
2008-1050
2008-11140
2008-12360
2009-01220
2009-0260
2009-03430
2009-04110
2009-0590
2009-06150
2009-07180
2009-08null or fewer
2009-0990
2009-1030
2009-11320
2009-12110
2010-01160
2010-02100
2010-03null or fewer
2010-04290
2010-05null or fewer
2010-06null or fewer
2010-07null or fewer
2010-08null or fewer
2010-09null or fewer
2010-10270
2010-11null or fewer
2010-12null or fewer
2011-01160
2011-02220
2011-03null or fewer
2011-04120
2011-05null or fewer
2011-06170
2011-07130
2011-08null or fewer
2011-09null or fewer
2011-10250
2011-11null or fewer
2011-12null or fewer
2012-0180
2012-02110
2012-03null or fewer
2012-04null or fewer
2012-05100
2012-06101
2012-07160
2012-08150
2012-09null or fewer
2012-10370
2012-1110
2012-12null or fewer
2013-0170
2013-02350
2013-0320
2013-04390
2013-05null or fewer
2013-06341
2013-07130
2013-08null or fewer
2013-09null or fewer
2013-10380
2013-11null or fewer
2013-12null or fewer
2014-0170
2014-02null or fewer
2014-03null or fewer
2014-0430
2014-05null or fewer
2014-06null or fewer
2014-0740
2014-08null or fewer
2014-09null or fewer
2014-10140
2014-11null or fewer
2014-12null or fewer
2015-01140
2015-02null or fewer
2015-03null or fewer
2015-04null or fewer
2015-05null or fewer
2015-06null or fewer
2015-0710
2015-08null or fewer
2015-09null or fewer
2015-10null or fewer
2015-11null or fewer
2015-12null or fewer
2016-0110
2016-0250
2016-0370
2016-0430
2016-05null or fewer
2016-06null or fewer
2016-07null or fewer
2016-08null or fewer
2016-09null or fewer
2016-10null or fewer
2016-11null or fewer
2016-12null or fewer
2017-01null or fewer
2017-02null or fewer
2017-03null or fewer
2017-04null or fewer
2017-05null or fewer
2017-06null or fewer
2017-07null or fewer
2017-0820
2017-09null or fewer
2017-10null or fewer
2017-11null or fewer
2017-12null or fewer
2018-01null or fewer
2018-02null or fewer
2018-03null or fewer
2018-04null or fewer
2018-05null or fewer
2018-06null or fewer
2018-07null or fewer
2018-08null or fewer
2018-09null or fewer
2018-10null or fewer
2018-11null or fewer
2018-12null or fewer
2019-01null or fewer
2019-02null or fewer
2019-03null or fewer
2019-04null or fewer
2019-05null or fewer
2019-06null or fewer
2019-07null or fewer
2019-08null or fewer
2019-09null or fewer
2019-10null or fewer
2019-11null or fewer
2019-12null or fewer
2020-01null or fewer
2020-02null or fewer
2020-0330
2020-04null or fewer
2020-05null or fewer
2020-06null or fewer
2020-07null or fewer
2020-08null or fewer
2020-09null or fewer
2020-10null or fewer
2020-11null or fewer
2020-12null or fewer
2021-01null or fewer
2021-02null or fewer
2021-03null or fewer
2021-04null or fewer
2021-05null or fewer
2021-06null or fewer
2021-07null or fewer
2021-08null or fewer
2021-09null or fewer
2021-10null or fewer
2021-11null or fewer
2021-1230

Products

The products that kept showing up in Sun's monthly top three, with their CVEs summed over those months.

  1. Jre35421 months
  2. Jdk33420 months
  3. Sunos19823 months
  4. Opensolaris9017 months
  5. Sdk907 months
  6. Solaris8018 months
  7. Java System Identity Manager162 months
  8. Java System Web Server92 months
  9. One Web Server72 months
  10. Ehrd62 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Sun.

  1. CVE-2021-43360Sunnet eHRD - Insecure Deserialization8.8
  2. CVE-2021-43359Sunnet eHRD - Broken Access Control8.8
  3. CVE-2021-43358Sunnet eHRD - Path Traversal7.5
  4. CVE-2020-14871Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allo...10.0
  5. CVE-2020-10510Sunnet eHRD - Broken Access Control8.1
  6. CVE-2020-10508Sunnet eHRD - Sensitive Data Exposure7.5
  7. CVE-2020-10509Sunnet eHRD - Cross-Site Scripting6.1
  8. CVE-2019-8457SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.9.8
  9. CVE-2018-11279Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MD...8.8
  10. CVE-2018-11267In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600,...7.8
  11. CVE-2017-3632Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: CDE Calendar). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows...9.8
  12. CVE-2017-10004Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high ...6.7
  13. CVE-2016-1290The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and g...8.1
  14. CVE-2016-1291Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP P...9.8
  15. CVE-2015-6313Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and Virtual Machine (VM) devices allows remote attackers to c...7.5

The record

Peak rank
#1 in Nov 2009
Busiest month shown
Mar 2009, 43 CVEs
Months with a KEV entry
2 since Feb 2008
Monthly snapshots
139 since 1999
Sun's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store