Netapp Element Software Management Node vulnerabilities

9 CVEs affecting Netapp Element Software Management Node, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-14287, published 2019-10-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-14287, published 2019-10-17. High severity, CVSS 8.8. EPSS: 63.8% chance of exploitation in the next 30 days. In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a…
CVE-2017-3135, published 2019-01-16. Medium severity, CVSS 5.9. EPSS: 17.2% chance of exploitation in the next 30 days. Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to…
CVE-2017-7657, published 2018-06-26. Critical severity, CVSS 9.8. EPSS: 14.9% chance of exploitation in the next 30 days. In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk…
CVE-2018-19985, published 2019-03-21. Medium severity, CVSS 4.6. EPSS: 1% chance of exploitation in the next 30 days. The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object…
CVE-2019-7221, published 2019-03-21. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.
CVE-2019-5489, published 2019-01-07. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially…
CVE-2019-7222, published 2019-03-21. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.
CVE-2018-3627, published 2018-07-10. High severity, CVSS 8.2. EPSS: 0.6% chance of exploitation in the next 30 days. Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access.
CVE-2018-20449, published 2019-04-04. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.