Netapp Hci vulnerabilities

16 CVEs affecting Netapp Hci, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-36054, published 2023-08-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-5753, published 2018-01-04. Medium severity, CVSS 5.6. EPSS: 93.8% chance of exploitation in the next 30 days. Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVE-2021-28169, published 2021-06-09. Medium severity, CVSS 5.3. EPSS: 78.5% chance of exploitation in the next 30 days. For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For…
CVE-2020-27223, published 2021-02-26. Medium severity, CVSS 5.3. EPSS: 78% chance of exploitation in the next 30 days. In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q)…
CVE-2022-37434, published 2022-08-05. Critical severity, CVSS 9.8. EPSS: 19% chance of exploitation in the next 30 days. zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected.…
CVE-2021-3737, published 2022-03-04. High severity, CVSS 7.5. EPSS: 13.2% chance of exploitation in the next 30 days. A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an…
CVE-2021-42340, published 2021-10-14. High severity, CVSS 7.5. EPSS: 11.8% chance of exploitation in the next 30 days. The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics…
CVE-2018-7185, published 2018-03-06. High severity, CVSS 7.5. EPSS: 9% chance of exploitation in the next 30 days. The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address…
CVE-2022-0391, published 2022-02-09. High severity, CVSS 7.5. EPSS: 8.5% chance of exploitation in the next 30 days. A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method…
CVE-2023-36054, published 2023-08-07. Medium severity, CVSS 6.5. EPSS: 2.8% chance of exploitation in the next 30 days. lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs…
CVE-2018-7170, published 2018-03-06. Medium severity, CVSS 5.3. EPSS: 2.7% chance of exploitation in the next 30 days. ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock…

Latest

CVE-2023-32250, published 2023-07-10. High severity, CVSS 8.1. EPSS: 2.6% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP commands. The issue results from the lack…
CVE-2022-45061, published 2022-11-09. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably…
CVE-2021-22118, published 2021-05-27. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory,…