A vulnerability exists in the Utility component of Oracle Solaris 11.4 that allows a low‑privileged user who can log on to the system to gain the ability to create, delete, or modify critical data. Once the attacker has local access, they can compromise the integrity of Solaris by altering files or configurations that are normally protected. The impact is limited to integrity; there is no disclosed confidentiality or availability impact.

Oracle Solaris 11.4, specifically its Utility component. The vulnerability is documented for version 11.4 only; no other Solaris releases or Oracle products are listed as affected in the provided information.

The CVSS 3.1 base score of 6.5 reflects a moderate severity: local access, low attack complexity, low privilege, no user interaction, and a compromised integrity impact. The EPSS score of 0.00137 indicates a very low probability of exploitation, and with the vulnerability not listed in the CISA KEV catalog, no widespread exploitation has been observed or reported yet. The attacker must be able to log on to the host; with low privilege, they can exploit the flaw to alter critical data and thereby undermine system integrity. The description notes that scope can extend to other products, indicating a broader potential impact beyond Solaris itself.