Vulnerability in Oracle Solaris Cluster

CVE-2011-2297

Unspecified vulnerability in Oracle Solaris Cluster 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Data Service for WebLogic Server.

Published 2011-07-21 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 6.1 (Medium). Vector: AV:L/AC:L/Au:N/C:P/I:P/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.004 (29.2th percentile), scored 2026-10-21.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 29th percentile — 29.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000

Affected products

Oracle Solaris Cluster — versions 3.3

References

www.us-cert.gov/cas/techalerts/TA11-201A.html (US Government Resource, third-party-advisory)
www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html (Patch, Vendor Advisory)