A vulnerability exists in the Services component of Oracle Solaris that allows an attacker who is already authenticated to the infrastructure hosting the operating system to compromise the product. The flaw is difficult to exploit and requires that a person other than the attacker perform an action on the system, indicating that social‑engineering or human‑intervention is necessary. If successful, an attacker can gain unauthorized update, insert, or delete access to data managed by Oracle Solaris, thereby affecting the integrity of that data.

Oracle Corporation’s Oracle Solaris operating system, specifically version 11.4.

The CVSS 3.1 base score is 2.5, reflecting a low severity with integrity impacts. The exploitation likelihood is low, as the EPSS score is less than 1 % and the vulnerability is not listed in the CISA KEV catalog. Likely attack conditions involve a local attacker who has logged in to the same infrastructure and then relies on a human to execute a malicious action, suggesting a local‑based attack vector that requires social engineering.