CVE-2020-14871

An unspecified vulnerability in Oracle Solaris and ZFS was actively exploited in the wild, causing high impacts to confidentiality, integrity, and availability.

Oracle Solaris and ZFS Storage Appliance Kit contained an unspecified vulnerability that was added to CISA's KEV catalog, indicating active exploitation. DIB organizations must ensure their Oracle Solaris and ZFS systems are patched immediately to prevent potential data breaches, system compromise, or service disruption. The lack of specific technical details in the source limits the ability to assess RCE or zero-day status, but the KEV designation alone warrants urgent patching.

Shame score — The vulnerability was actively exploited in the wild and added to CISA's KEV catalog, demonstrating a failure to patch a known or exploitable issue before adversaries leveraged it for high-impact attacks.