Netapp E-Series Santricity Management Plug-Ins vulnerabilities

28 CVEs affecting Netapp E-Series Santricity Management Plug-Ins, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-14782, published 2020-10-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-3427: Oracle Java SE and JRockit Unspecified Vulnerability, published 2016-04-21. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-05-12. EPSS: 92.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via…
CVE-2017-10355, published 2017-10-19. Medium severity, CVSS 5.3. EPSS: 16.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE…
CVE-2017-10309, published 2017-10-19. High severity, CVSS 7.1. EPSS: 8.8% chance of exploitation in the next 30 days. Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows…
CVE-2019-11068, published 2019-04-10. Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days. libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a…
CVE-2019-13118, published 2019-07-01. Medium severity, CVSS 5.3. EPSS: 5.1% chance of exploitation in the next 30 days. In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal,…
CVE-2020-2604, published 2020-01-15. High severity, CVSS 8.1. EPSS: 4.9% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE…
CVE-2020-2659, published 2020-01-15. Low severity, CVSS 3.7. EPSS: 4.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult…
CVE-2020-2654, published 2020-01-15. Low severity, CVSS 3.7. EPSS: 4% chance of exploitation in the next 30 days. Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability…
CVE-2018-2638, published 2018-01-18. High severity, CVSS 8.3. EPSS: 3.3% chance of exploitation in the next 30 days. Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows…
CVE-2020-2585, published 2020-01-15. Medium severity, CVSS 5.9. EPSS: 3.3% chance of exploitation in the next 30 days. Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated…

Latest

CVE-2020-14782, published 2020-10-21. Low severity, CVSS 3.7. EPSS: 2.3% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded:…
CVE-2018-12538, published 2018-06-22. High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days. In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to…
CVE-2018-2627, published 2018-01-18. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low…