Netapp Cloud Insights Telegraf vulnerabilities

5 CVEs affecting Netapp Cloud Insights Telegraf, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-28131, published 2022-08-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-34558, published 2021-07-15. Medium severity, CVSS 6.5. EPSS: 7% chance of exploitation in the next 30 days. The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a…
CVE-2021-39293, published 2022-01-24. High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days. In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue…
CVE-2021-44716, published 2022-01-01. High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days. net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.
CVE-2020-7919, published 2020-03-16. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509…
CVE-2022-28131, published 2022-08-10. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.