Netapp Brocade San Navigator vulnerabilities

11 CVEs affecting Netapp Brocade San Navigator, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-21502, published 2025-01-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-44228: Apache Log4j2 Remote Code Execution Vulnerability, published 2021-12-10. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2021-12-10. EPSS: 100% chance of exploitation in the next 30 days. Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker…
CVE-2024-47561, published 2024-10-03. High severity, CVSS 7.3. EPSS: 3.3% chance of exploitation in the next 30 days. Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this…
CVE-2023-21939, published 2023-04-18. Medium severity, CVSS 5.3. EPSS: 2.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf,…
CVE-2022-22970, published 2022-05-12. Medium severity, CVSS 5.3. EPSS: 2% chance of exploitation in the next 30 days. In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a…
CVE-2023-21967, published 2023-04-18. Medium severity, CVSS 5.9. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf,…
CVE-2023-21954, published 2023-04-18. Medium severity, CVSS 5.9. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf,…
CVE-2023-21930, published 2023-04-18. High severity, CVSS 7.4. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf,…
CVE-2023-21938, published 2023-04-18. Low severity, CVSS 3.7. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf,…
CVE-2023-21937, published 2023-04-18. Low severity, CVSS 3.7. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf,…
CVE-2023-21968, published 2023-04-18. Low severity, CVSS 3.7. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf,…

Latest

CVE-2025-21502, published 2025-01-21. Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java…