Netapp Ontap Select Deploy vulnerabilities

8 CVEs affecting Netapp Ontap Select Deploy, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28656, published 2023-05-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-15473, published 2018-08-17. Medium severity, CVSS 5.3. EPSS: 98.6% chance of exploitation in the next 30 days. OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed,…
CVE-2016-8610, published 2017-11-13. High severity, CVSS 7.5. EPSS: 39.7% chance of exploitation in the next 30 days. A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote…
CVE-2019-6110, published 2019-01-31. Medium severity, CVSS 6.8. EPSS: 24.9% chance of exploitation in the next 30 days. In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI…
CVE-2019-1559, published 2019-02-27. Medium severity, CVSS 5.9. EPSS: 17.1% chance of exploitation in the next 30 days. If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling…
CVE-2019-6109, published 2019-01-31. Medium severity, CVSS 6.8. EPSS: 3.8% chance of exploitation in the next 30 days. An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the…
CVE-2018-20685, published 2019-01-10. Medium severity, CVSS 5.3. EPSS: 3.7% chance of exploitation in the next 30 days. In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the…
CVE-2018-15919, published 2018-08-28. Medium severity, CVSS 5.3. EPSS: 3.6% chance of exploitation in the next 30 days. Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states…
CVE-2023-28656, published 2023-05-03. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment. Note: Software versions which have reached End of…