Netapp Inventory Collect Tool vulnerabilities

2 CVEs affecting Netapp Inventory Collect Tool, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-23336, published 2021-02-15.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-23336, published 2021-02-15. Medium severity, CVSS 5.9. EPSS: 40.7% chance of exploitation in the next 30 days. The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via…
• CVE-2020-24977, published 2020-09-04. Medium severity, CVSS 6.5. EPSS: 3% chance of exploitation in the next 30 days. GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.