Netapp Plug-In For Symantec Netbackup vulnerabilities

69 CVEs affecting Netapp Plug-In For Symantec Netbackup, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1971, published 2020-12-08.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-10355, published 2017-10-19. Medium severity, CVSS 5.3. EPSS: 16.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE…
• CVE-2019-7317, published 2019-02-04. Medium severity, CVSS 5.3. EPSS: 9.4% chance of exploitation in the next 30 days. png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
• CVE-2017-10309, published 2017-10-19. High severity, CVSS 7.1. EPSS: 8.8% chance of exploitation in the next 30 days. Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows…
• CVE-2020-1971, published 2020-12-08. Medium severity, CVSS 5.9. EPSS: 7.1% chance of exploitation in the next 30 days. The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares…
• CVE-2020-2803, published 2020-04-15. High severity, CVSS 8.3. EPSS: 6.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded:…
• CVE-2019-11068, published 2019-04-10. Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days. libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a…
• CVE-2019-13118, published 2019-07-01. Medium severity, CVSS 5.3. EPSS: 5.1% chance of exploitation in the next 30 days. In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal,…
• CVE-2017-10176, published 2017-08-08. High severity, CVSS 7.5. EPSS: 5% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded:…
• CVE-2020-2830, published 2020-04-15. Medium severity, CVSS 5.3. EPSS: 4.9% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded:…
• CVE-2018-2973, published 2018-07-18. Medium severity, CVSS 5.9. EPSS: 4.7% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded:…

Latest

• CVE-2020-14621, published 2020-07-15. Medium severity, CVSS 5.3. EPSS: 4.4% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251.…
• CVE-2020-2816, published 2020-04-15. High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days. Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated…
• CVE-2020-2805, published 2020-04-15. High severity, CVSS 8.3. EPSS: 4.1% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded:…
• CVE-2020-2800, published 2020-04-15. Medium severity, CVSS 4.8. EPSS: 2.9% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE…
• CVE-2020-2778, published 2020-04-15. Low severity, CVSS 3.7. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated…
• CVE-2020-2767, published 2020-04-15. Medium severity, CVSS 4.8. EPSS: 2.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated…
• CVE-2019-20388, published 2020-01-21. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.