CVE-2018-2563: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDAP Library).

Security readout for executives and security teams

CVE-2018-2563 affects Oracle Solaris 10 and 11.3 LDAP Library. A low-privileged attacker with network access via LDAP could read some Solaris-accessible data and modify, insert, or delete some data. Oracle rates exploitation as difficult, and availability is not impacted. Exposure is most likely in legacy Oracle Solaris 10 or 11.3 systems using LDAP-related functionality, especially where LDAP network access is available to low-privileged users. Systems not running those versions are not identified as affected in the provided sources. Moderate priority. The issue can affect confidentiality and integrity, but exploitation is described as difficult and no active exploitation evidence is provided. Address it in legacy Solaris patch cycles, with faster action for LDAP-exposed or business-critical Solaris systems. Mitigation focus: Review Oracle April 2018 Critical Patch Update guidance for Solaris fixes.; Prioritize patching Solaris 10 and 11.3 systems using LDAP functionality.; Restrict LDAP network access to trusted users and networks where feasible..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.