What’s Vulnerable › Products

Oracle Corporation Oracle ZFS Storage Appliance Kit vulnerabilities

119 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your Oracle Corporation Oracle ZFS Storage Appliance Kit version is affected

Exploited Oracle Corporation Oracle ZFS Storage Appliance Kit vulnerabilities

• CVE-2021-4034 — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
• CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF)
• CVE-2020-1472 — Netlogon Elevation of Privilege Vulnerability

Latest Oracle Corporation Oracle ZFS Storage Appliance Kit vulnerabilities

• CVE-2026-91527 — (CVSS 8.8)
• CVE-2026-101597 — (CVSS 5.3)
• CVE-2025-62480 — (CVSS 2.7)
• CVE-2025-62479 — (CVSS 2.7)
• CVE-2025-62478 — (CVSS 4.9)
• CVE-2025-62477 — (CVSS 4.9)
• CVE-2025-62476 — (CVSS 4.9)
• CVE-2025-62475 — (CVSS 4.9)
• CVE-2025-62290 — (CVSS 7.2)
• CVE-2025-62289 — (CVSS 4.9)
• CVE-2025-53046 — (CVSS 4.9)
• CVE-2024-21155 — (CVSS 4.7)
• CVE-2024-21104 — (CVSS 6.5)
• CVE-2023-21833 — (CVSS 4.3)
• CVE-2024-20959 — (CVSS 4.4)
• CVE-2024-20914 — (CVSS 2.3)
• CVE-2022-21563 — (CVSS 3.4)
• CVE-2022-21513 — (CVSS 8.2)
• CVE-2022-29824 — (CVSS 6.5)
• CVE-2022-24801 — HTTP Request Smuggling in twisted.web (CVSS 8.1)
• CVE-2022-23943 — mod_sed: Read/write beyond bounds (CVSS 9.8)
• CVE-2022-22721 — core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody (CVSS 9.1)
• CVE-2022-22720 — HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier (CVSS 9.8)
• CVE-2022-22719 — mod_lua Use of uninitialized value of in r:parsebody (CVSS 7.5)
• CVE-2022-21716 — Buffer Overflow in Twisted (CVSS 7.5)