CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: May 3, 2022

CVE-2020-14871

High

EPSS 88.9%CISA KEV

Oracle/Solaris and Zettabyte File System (ZFS)

Description

Oracle Solaris and Oracle ZFS Storage Appliance Kit contain an unspecified vulnerability causing high impacts to confidentiality, integrity, and availability of affected systems.

EPSS — Exploit Probability

88.9%

Higher than 99.5% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2020-14871

Risk Assessment

HIGH

In CISA KEV

High EPSS

Details

Severity: High
EPSS: 88.9%
CISA KEV: Yes
Ransomware: Unknown
Articles: 0

Timeline

Published

Nov 3, 2021

Added to KEV

Nov 3, 2021

Remediation Due

May 3, 2022

Affected Product

Oracle

Solaris and Zettabyte File System (ZFS)

View all Oracle CVEs

External Links

NVD (NIST)CVE Details MITRE CVE