Netapp Bluexp vulnerabilities

13 CVEs affecting Netapp Bluexp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-47554, published 2024-10-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-42889, published 2022-10-13. Critical severity, CVSS 9.8. EPSS: 99.9% chance of exploitation in the next 30 days. Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to…
CVE-2024-25617, published 2024-02-14. High severity, CVSS 7.5. EPSS: 88.1% chance of exploitation in the next 30 days. Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against…
CVE-2024-25111, published 2024-03-06. High severity, CVSS 7.5. EPSS: 65.3% chance of exploitation in the next 30 days. Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion…
CVE-2024-7254, published 2024-09-19. High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days. Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing…
CVE-2024-22201, published 2024-02-26. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up…
CVE-2024-47554, published 2024-10-03. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted…
CVE-2024-21138, published 2024-07-16. Low severity, CVSS 3.7. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java…
CVE-2024-21147, published 2024-07-16. High severity, CVSS 7.4. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java…
CVE-2024-21131, published 2024-07-16. Low severity, CVSS 3.7. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java…
CVE-2024-21140, published 2024-07-16. Medium severity, CVSS 4.8. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java…

Latest

CVE-2024-21145, published 2024-07-16. Medium severity, CVSS 4.8. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE:…
CVE-2024-30171, published 2024-05-14. Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days. An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.
CVE-2024-21055, published 2024-04-16. Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high…