Oracle ZFS Storage Appliance Kit vulnerabilities

Vulnerability in the Oracle ZFS Storage Appliance Kit product (component: Naming Subsystem). The supported version affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit, resulting in unauthorized ability to cause a partial denial of service. CVSS 3.1 Base Score 2.7 (Availability impacts).

Vulnerability in Oracle ZFS Storage Appliance Kit (component: Remote Replication) affecting version 8.8. A high-privileged attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS) of the appliance.

Vulnerability in Oracle ZFS Storage Appliance Kit (Block Storage component) version 8.8. A high privileged attacker with network access via HTTP can compromise the appliance, potentially leading to full takeover. CVSS 7.2.