Netapp E-Series Santricity Management vulnerabilities

11 CVEs affecting Netapp E-Series Santricity Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-2601, published 2020-01-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-7658, published 2018-06-26. Critical severity, CVSS 9.8. EPSS: 19.4% chance of exploitation in the next 30 days. In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the…
CVE-2017-7657, published 2018-06-26. Critical severity, CVSS 9.8. EPSS: 14.9% chance of exploitation in the next 30 days. In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk…
CVE-2019-7317, published 2019-02-04. Medium severity, CVSS 5.3. EPSS: 9.4% chance of exploitation in the next 30 days. png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
CVE-2016-9841, published 2017-05-23. Critical severity, CVSS 9.8. EPSS: 7.6% chance of exploitation in the next 30 days. inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVE-2018-2826, published 2018-04-19. High severity, CVSS 8.3. EPSS: 4.9% chance of exploitation in the next 30 days. Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated…
CVE-2020-2601, published 2020-01-15. Medium severity, CVSS 6.8. EPSS: 4.3% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded:…
CVE-2018-2825, published 2018-04-19. High severity, CVSS 8.3. EPSS: 4.1% chance of exploitation in the next 30 days. Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated…
CVE-2020-2583, published 2020-01-15. Low severity, CVSS 3.7. EPSS: 4% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE…
CVE-2020-2590, published 2020-01-15. Low severity, CVSS 3.7. EPSS: 3.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded:…
CVE-2020-2593, published 2020-01-15. Medium severity, CVSS 4.8. EPSS: 3% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded:…