Netapp Hci Storage Node vulnerabilities

27 CVEs affecting Netapp Hci Storage Node, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-2163, published 2021-04-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-7658, published 2018-06-26. Critical severity, CVSS 9.8. EPSS: 19.4% chance of exploitation in the next 30 days. In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the…
CVE-2020-15778, published 2020-07-24. High severity, CVSS 7.4. EPSS: 13.7% chance of exploitation in the next 30 days. scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that…
CVE-2007-2768, published 2007-05-21. Medium severity, CVSS 4.3. EPSS: 8.6% chance of exploitation in the next 30 days. OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user…
CVE-2016-9841, published 2017-05-23. Critical severity, CVSS 9.8. EPSS: 7.6% chance of exploitation in the next 30 days. inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVE-2020-1971, published 2020-12-08. Medium severity, CVSS 5.9. EPSS: 7.1% chance of exploitation in the next 30 days. The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares…
CVE-2020-26116, published 2020-09-27. High severity, CVSS 7.2. EPSS: 6.4% chance of exploitation in the next 30 days. http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by…
CVE-2021-22876, published 2021-04-01. Medium severity, CVSS 5.3. EPSS: 5.3% chance of exploitation in the next 30 days. curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip…
CVE-2019-19050, published 2019-11-18. High severity, CVSS 7.5. EPSS: 5.1% chance of exploitation in the next 30 days. A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering…
CVE-2019-11815, published 2019-05-08. High severity, CVSS 8.1. EPSS: 4.4% chance of exploitation in the next 30 days. An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.
CVE-2020-8584, published 2021-01-08. Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days. Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution.

Latest

CVE-2021-2163, published 2021-04-22. Medium severity, CVSS 5.3. EPSS: 3.6% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281,…
CVE-2021-2161, published 2021-04-22. Medium severity, CVSS 5.9. EPSS: 3.5% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281,…
CVE-2021-22890, published 2021-04-01. Low severity, CVSS 3.7. EPSS: 3.1% chance of exploitation in the next 30 days. curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS…
CVE-2020-8284, published 2020-12-14. Low severity, CVSS 3.7. EPSS: 3.9% chance of exploitation in the next 30 days. A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about…
CVE-2020-29369, published 2020-11-28. High severity, CVSS 7.0. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations…
CVE-2019-17006, published 2020-10-22. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the…
CVE-2020-14803, published 2020-10-21. Medium severity, CVSS 5.3. EPSS: 3.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated…