VYPR

E Series Santricity Web Services Proxy

by NetApp

CVEs (35)

  • CVE-2023-46604CriKEVOct 27, 2023
    Apache
    Activemq
    risk 0.87cvss 10.0epss 1.00

    The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the…

  • CVE-2017-17485CriJan 10, 2018
    Fasterxml
    Jackson Databind
    risk 0.61cvss 9.8epss 0.50

    FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the…

  • CVE-2019-11068CriApr 10, 2019
    Xmlsoft
    Libxslt
    risk 0.57cvss 9.8epss 0.05

    libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.

  • CVE-2018-12538HigJun 22, 2018
    Eclipse
    Jetty
    risk 0.57cvss 8.8epss 0.03

    In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/hijack other HttpSessions and even delete unmatched HttpSessions present in the…

  • CVE-2020-2604HigJan 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.53cvss 8.1epss 0.05

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker…

  • CVE-2018-5968HigJan 22, 2018
    Fasterxml
    Jackson Databind
    risk 0.46cvss 8.1epss 0.07

    FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.

  • CVE-2019-2989MedOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.44cvss 6.8epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2019-2949MedOct 16, 2019
    McAfee
    Epolicy Orchestrator
    risk 0.44cvss 6.8epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2019-2958MedOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.39cvss 5.9epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-14803MedOct 21, 2020
    NetApp
    Hci Management Node
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2020-14562MedJul 15, 2020
    Fedoraproject
    Fedora
    risk 0.35cvss 5.3epss 0.05

    Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2019-2999MedOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.31cvss 4.7epss 0.03

    Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…

  • CVE-2019-2977MedOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.31cvss 4.8epss 0.03

    Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2019-2975MedOct 16, 2019
    McAfee
    Epolicy Orchestrator
    risk 0.31cvss 4.8epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-14792MedOct 21, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.27cvss 4.2epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2019-2996MedOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.27cvss 4.2epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u221; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2020-14797LowOct 21, 2020
    NetApp
    Hci Management Node
    risk 0.24cvss 3.7epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-14782LowOct 21, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-14781LowOct 21, 2020
    NetApp
    Hci Management Node
    risk 0.24cvss 3.7epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-14573LowJul 15, 2020
    Fedoraproject
    Fedora
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

Page 1 of 2