Netapp Host Agent vulnerabilities

2 CVEs affecting Netapp Host Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-8610, published 2017-11-13.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-8610, published 2017-11-13. High severity, CVSS 7.5. EPSS: 39.7% chance of exploitation in the next 30 days. A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote…
• CVE-2015-8960, published 2016-09-21. High severity, CVSS 8.1. EPSS: 1.9% chance of exploitation in the next 30 days. The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute…