oracle zfs storage appliance

Name: oracle zfs storage appliance
Brand: oracle

productUS

cpe:2.3:o:oracle:zfs_storage_appliance:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

critical

by severity

0critical6high2medium4low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-23336US	medium5.9	40.7% (99th)	—	no fix	2021-02-15	= 8.8
CVE-2019-16168US	medium6.5	4.22% (91st)	—	no fix	2019-09-09	= 8.8
CVE-2019-19553US	high7.5	4.13% (91st)	—	no fix	2019-12-05	= 8.8
CVE-2021-22191US	high8.8	3.65% (90th)	—	no fix	2021-03-15	= 8.8
CVE-2021-28041US	high7.1	3.51% (89th)	—	no fix	2021-03-05	= 8.8
CVE-2021-22174US	high7.5	2.75% (86th)	—	no fix	2021-02-17	= 8.8
CVE-2021-22173US	high7.5	2.41% (84th)	—	no fix	2021-02-17	= 8.8
CVE-2021-1993US	low2.1	0.82% (57th)	—	no fix	2021-01-20	= 8.8
CVE-2018-1165US	high7.0	0.50% (43rd)	—	no fix	2018-02-21	= 8.8
CVE-2021-1999US	low1.2	0.33% (26th)	—	no fix	2021-01-20	= 8.8
CVE-2021-2147US	low1.2	0.32% (25th)	—	no fix	2021-04-22	= 8.8
CVE-2021-2149US	low1.9	0.28% (21st)	—	no fix	2021-04-22	= 8.8

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation4 CVEs
CWE-264CWE-2642 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-369Divide By Zero1 CVEs
CWE-401Missing Release of Memory after Effective Lifetime1 CVEs
CWE-415Double Free1 CVEs
CWE-416Use After Free1 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.