Netapp E-Series Santricity Unified Manager vulnerabilities

30 CVEs affecting Netapp E-Series Santricity Unified Manager, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-47554, published 2024-10-03.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-46604: Apache ActiveMQ Deserialization of Untrusted Data Vulnerability, published 2023-10-27. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-11-02. EPSS: 99.9% chance of exploitation in the next 30 days. The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to…
• CVE-2019-7317, published 2019-02-04. Medium severity, CVSS 5.3. EPSS: 9.4% chance of exploitation in the next 30 days. png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
• CVE-2019-11068, published 2019-04-10. Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days. libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a…
• CVE-2020-14562, published 2020-07-15. Medium severity, CVSS 5.3. EPSS: 5.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows…
• CVE-2019-2983, published 2019-10-16. Low severity, CVSS 3.7. EPSS: 3.7% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded:…
• CVE-2019-2981, published 2019-10-16. Low severity, CVSS 3.7. EPSS: 3.7% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221.…
• CVE-2019-2973, published 2019-10-16. Low severity, CVSS 3.7. EPSS: 3.7% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221.…
• CVE-2019-2949, published 2019-10-16. Medium severity, CVSS 6.8. EPSS: 3.6% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221.…
• CVE-2019-2987, published 2019-10-16. Low severity, CVSS 3.7. EPSS: 3.5% chance of exploitation in the next 30 days. Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated…
• CVE-2019-2964, published 2019-10-16. Low severity, CVSS 3.7. EPSS: 3.5% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded:…

Latest

• CVE-2024-47554, published 2024-10-03. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted…
• CVE-2023-26049, published 2023-04-18. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by…
• CVE-2022-39399, published 2022-10-18. Low severity, CVSS 3.7. EPSS: 2.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.16.1, 17.0.4.1,…
• CVE-2022-21628, published 2022-10-18. Medium severity, CVSS 5.3. EPSS: 2.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Oracle Java SE: 8u341,…
• CVE-2022-21626, published 2022-10-18. Medium severity, CVSS 5.3. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf,…
• CVE-2022-21624, published 2022-10-18. Low severity, CVSS 3.7. EPSS: 2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf,…
• CVE-2022-21619, published 2022-10-18. Low severity, CVSS 3.7. EPSS: 3.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf,…
• CVE-2022-21618, published 2022-10-18. Medium severity, CVSS 5.3. EPSS: 2.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 17.0.4.1, 19; Oracle…
• CVE-2020-14573, published 2020-07-15. Low severity, CVSS 3.7. EPSS: 3.4% chance of exploitation in the next 30 days. Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows…