VYPR

E Series Performance Analyzer

by NetApp

CVEs (61)

  • CVE-2020-2593MedJan 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.31cvss 4.8epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2021-23383MedMay 4, 2021
    Handlebarsjs
    Handlebars
    risk 0.30cvss 5.6epss 0.05

    The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.

  • CVE-2020-11110MedJul 27, 2020
    Grafana
    Grafana
    risk 0.29cvss 5.4epss 0.10

    Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.

  • CVE-2022-21713MedFeb 8, 2022
    Grafana
    Grafana
    risk 0.28cvss 4.3epss 0.01

    Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose multiple API endpoints which do not properly handle user authorization. `/teams/:teamId` will allow an authenticated attacker to view unintended data by querying for the…

  • CVE-2021-32640MedMay 25, 2021
    Ws Project
    Ws
    risk 0.28cvss 5.3epss 0.03

    ws is an open source WebSocket client and server library for Node.js. A specially crafted value of the `Sec-Websocket-Protocol` header can be used to significantly slow down a ws server. The vulnerability has been fixed in [email protected] (https://github.com/websockets/ws/commit/00c425e…

  • CVE-2019-13118MedJul 1, 2019
    Xmlsoft
    Libxslt
    risk 0.28cvss 5.3epss 0.05

    In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.

  • CVE-2020-14782LowOct 21, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-14581LowJul 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access…

  • CVE-2020-14579LowJul 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2020-14578LowJul 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2020-14577LowJul 15, 2020
    Fedoraproject
    Fedora
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-2778LowApr 15, 2020
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.24cvss 3.7epss 0.02

    Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks…

  • CVE-2020-2773LowApr 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-2757LowApr 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2756LowApr 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2755LowApr 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-2659LowJan 15, 2020
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access…

  • CVE-2020-2654LowJan 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…

  • CVE-2020-2590LowJan 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2583LowJan 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker…

Page 3 of 4