Netapp Santricity Web Services Proxy vulnerabilities

7 CVEs affecting Netapp Santricity Web Services Proxy, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-39399, published 2022-10-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-28165, published 2021-04-01. High severity, CVSS 7.5. EPSS: 53.9% chance of exploitation in the next 30 days. In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
CVE-2018-5488, published 2018-06-13. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. NetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through 2.12.X000.0002 and SANtricity Storage Manager 11.30.0X00.0004 through 11.42.0X00.0001 ship with the Java Management Extension…
CVE-2022-21619, published 2022-10-18. Low severity, CVSS 3.7. EPSS: 3.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf,…
CVE-2022-21628, published 2022-10-18. Medium severity, CVSS 5.3. EPSS: 2.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Oracle Java SE: 8u341,…
CVE-2022-21626, published 2022-10-18. Medium severity, CVSS 5.3. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf,…
CVE-2022-39399, published 2022-10-18. Low severity, CVSS 3.7. EPSS: 2.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.16.1, 17.0.4.1,…
CVE-2022-21624, published 2022-10-18. Low severity, CVSS 3.7. EPSS: 2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf,…