4 ms·

Unfortunately it is both... the CVE is for Oracle software but they're running it on Solaris servers.