Netapp Ontap Antivirus Connector vulnerabilities

5 CVEs affecting Netapp Ontap Antivirus Connector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28322, published 2023-05-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-2068, published 2022-06-21. High severity, CVSS 7.3. EPSS: 96.4% chance of exploitation in the next 30 days. In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command…
CVE-2023-28320, published 2023-05-26. Medium severity, CVSS 5.9. EPSS: 2.7% chance of exploitation in the next 30 days. A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous…
CVE-2023-28319, published 2023-05-26. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the…
CVE-2023-28322, published 2023-05-26. Low severity, CVSS 3.7. EPSS: 2.2% chance of exploitation in the next 30 days. An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even…
CVE-2023-28321, published 2023-05-26. Medium severity, CVSS 5.9. EPSS: 1.8% chance of exploitation in the next 30 days. An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates. curl…