Netapp Active Iq Performance Analytics Services vulnerabilities

15 CVEs affecting Netapp Active Iq Performance Analytics Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-15902, published 2019-09-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-19039, published 2018-12-13. Medium severity, CVSS 6.5. EPSS: 7.3% chance of exploitation in the next 30 days. Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.
CVE-2018-17182, published 2018-09-19. High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and…
CVE-2019-7612, published 2019-03-25. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the…
CVE-2018-12099, published 2018-06-11. Medium severity, CVSS 6.1. EPSS: 2.1% chance of exploitation in the next 30 days. Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links.
CVE-2019-6454, published 2019-03-21. Medium severity, CVSS 5.5. EPSS: 2% chance of exploitation in the next 30 days. An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming…
CVE-2018-16866, published 2019-01-11. Low severity, CVSS 3.3. EPSS: 1.1% chance of exploitation in the next 30 days. An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data.…
CVE-2018-19985, published 2019-03-21. Medium severity, CVSS 4.6. EPSS: 1% chance of exploitation in the next 30 days. The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object…
CVE-2019-7221, published 2019-03-21. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.
CVE-2019-5489, published 2019-01-07. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially…
CVE-2019-15098, published 2019-08-16. Medium severity, CVSS 4.6. EPSS: 0.8% chance of exploitation in the next 30 days. drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.

Latest

CVE-2019-15902, published 2019-09-04. Medium severity, CVSS 5.6. EPSS: 0.6% chance of exploitation in the next 30 days. A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse…
CVE-2018-20855, published 2019-07-26. Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to…
CVE-2019-7222, published 2019-03-21. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.
CVE-2018-16888, published 2019-01-14. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user (e.g. User field set in the service…