The issue affects Oracle ZFS Storage Appliance Kit 8.8. A high privileged attacker who can log on to the underlying infrastructure can compromise the appliance and modify data stored on or accessible through it. The vulnerability enables unauthorized update, insert, or delete actions on the data, compromising integrity. It is an improper access control flaw that lets privileged users perform actions beyond what the system normally permits. A successful exploitation leads to integrity damage and potential loss of data consistency.

Oracle ZFS Storage Appliance Kit, version 8.8. No information on earlier or later releases is provided.

The vulnerability has a CVSS 3.1 base score of 2.3, indicating low severity primarily affecting integrity. The EPSS score of less than 1% suggests a very low probability of exploitation in the wild. The vulnerability is not included in the CISA KEV catalog, and no known exploitation campaigns exist. The attack vector likely requires local or high‑privileged access to the appliance environment; an attacker with such access could directly modify data through the appliance interfaces.