Netapp Santricity Storage Plugin vulnerabilities

23 CVEs affecting Netapp Santricity Storage Plugin, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-47554, published 2024-10-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-46604: Apache ActiveMQ Deserialization of Untrusted Data Vulnerability, published 2023-10-27. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-11-02. EPSS: 99.9% chance of exploitation in the next 30 days. The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to…
CVE-2022-21293, published 2022-01-19. Medium severity, CVSS 5.3. EPSS: 8.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311,…
CVE-2022-21340, published 2022-01-19. Medium severity, CVSS 5.3. EPSS: 7.7% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311,…
CVE-2022-21283, published 2022-01-19. Medium severity, CVSS 5.3. EPSS: 3.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1;…
CVE-2022-21341, published 2022-01-19. Medium severity, CVSS 5.3. EPSS: 3.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 7u321, 8u311,…
CVE-2022-21248, published 2022-01-19. Low severity, CVSS 3.7. EPSS: 3.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 7u321, 8u311,…
CVE-2022-21365, published 2022-01-19. Medium severity, CVSS 5.3. EPSS: 3.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13,…
CVE-2022-21360, published 2022-01-19. Medium severity, CVSS 5.3. EPSS: 3.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13,…
CVE-2022-21299, published 2022-01-19. Medium severity, CVSS 5.3. EPSS: 3.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13,…
CVE-2022-21294, published 2022-01-19. Medium severity, CVSS 5.3. EPSS: 3.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311,…

Latest

CVE-2024-47554, published 2024-10-03. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted…
CVE-2022-39399, published 2022-10-18. Low severity, CVSS 3.7. EPSS: 2.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.16.1, 17.0.4.1,…
CVE-2022-21628, published 2022-10-18. Medium severity, CVSS 5.3. EPSS: 2.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Oracle Java SE: 8u341,…
CVE-2022-21626, published 2022-10-18. Medium severity, CVSS 5.3. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf,…
CVE-2022-21624, published 2022-10-18. Low severity, CVSS 3.7. EPSS: 2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf,…
CVE-2022-21619, published 2022-10-18. Low severity, CVSS 3.7. EPSS: 3.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf,…
CVE-2022-21618, published 2022-10-18. Medium severity, CVSS 5.3. EPSS: 2.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 17.0.4.1, 19; Oracle…
CVE-2022-21366, published 2022-01-19. Medium severity, CVSS 5.3. EPSS: 3.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle…