Netapp E-Series Santricity Web Services Proxy vulnerabilities

35 CVEs affecting Netapp E-Series Santricity Web Services Proxy, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-47554, published 2024-10-03.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-46604: Apache ActiveMQ Deserialization of Untrusted Data Vulnerability, published 2023-10-27. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-11-02. EPSS: 99.9% chance of exploitation in the next 30 days. The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to…
• CVE-2017-17485, published 2018-01-10. Critical severity, CVSS 9.8. EPSS: 49.7% chance of exploitation in the next 30 days. FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is…
• CVE-2018-5968, published 2018-01-22. High severity, CVSS 8.1. EPSS: 7.2% chance of exploitation in the next 30 days. FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization…
• CVE-2019-11068, published 2019-04-10. Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days. libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a…
• CVE-2020-14562, published 2020-07-15. Medium severity, CVSS 5.3. EPSS: 5.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows…
• CVE-2020-2604, published 2020-01-15. High severity, CVSS 8.1. EPSS: 4.9% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE…
• CVE-2020-2659, published 2020-01-15. Low severity, CVSS 3.7. EPSS: 4.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult…
• CVE-2020-2654, published 2020-01-15. Low severity, CVSS 3.7. EPSS: 4% chance of exploitation in the next 30 days. Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability…
• CVE-2019-2983, published 2019-10-16. Low severity, CVSS 3.7. EPSS: 3.7% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded:…
• CVE-2019-2981, published 2019-10-16. Low severity, CVSS 3.7. EPSS: 3.7% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221.…

Latest

• CVE-2024-47554, published 2024-10-03. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted…
• CVE-2020-14803, published 2020-10-21. Medium severity, CVSS 5.3. EPSS: 3.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated…
• CVE-2020-14798, published 2020-10-21. Low severity, CVSS 3.1. EPSS: 2.7% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded:…
• CVE-2020-14797, published 2020-10-21. Low severity, CVSS 3.7. EPSS: 2.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded:…
• CVE-2020-14796, published 2020-10-21. Low severity, CVSS 3.1. EPSS: 2.5% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded:…
• CVE-2020-14792, published 2020-10-21. Medium severity, CVSS 4.2. EPSS: 2.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261.…
• CVE-2020-14782, published 2020-10-21. Low severity, CVSS 3.7. EPSS: 2.3% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded:…
• CVE-2020-14781, published 2020-10-21. Low severity, CVSS 3.7. EPSS: 2.3% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261.…
• CVE-2020-14573, published 2020-07-15. Low severity, CVSS 3.7. EPSS: 3.4% chance of exploitation in the next 30 days. Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows…