Netapp Management Services For Element Software And Netapp Hci vulnerabilities

16 CVEs affecting Netapp Management Services For Element Software And Netapp Hci, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6119, published 2024-09-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-6119, published 2024-09-03. High severity, CVSS 7.5. EPSS: 66.6% chance of exploitation in the next 30 days. Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the…
CVE-2021-41079, published 2021-09-16. High severity, CVSS 7.5. EPSS: 7.2% chance of exploitation in the next 30 days. Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a…
CVE-2021-37714, published 2021-08-18. High severity, CVSS 7.5. EPSS: 6.7% chance of exploitation in the next 30 days. jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input,…
CVE-2021-3733, published 2022-03-10. Medium severity, CVSS 6.5. EPSS: 4.8% chance of exploitation in the next 30 days. There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression…
CVE-2021-41099, published 2021-10-04. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string library can be used to corrupt the heap and potentially result with denial of…
CVE-2022-2048, published 2022-07-07. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and…
CVE-2021-26987, published 2021-03-15. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to…
CVE-2019-10219, published 2019-11-08. Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions.…
CVE-2021-32765, published 2021-10-04. High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days. Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk`…
CVE-2021-22096, published 2021-10-28. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.

Latest

CVE-2024-39689, published 2024-07-05. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to…
CVE-2024-26462, published 2024-02-29. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
CVE-2024-26461, published 2024-02-29. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
CVE-2024-26458, published 2024-02-29. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
CVE-2023-2975, published 2023-07-14. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that…
CVE-2022-2047, published 2022-07-07. Low severity, CVSS 2.7. EPSS: 1.3% chance of exploitation in the next 30 days. In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly…