Netapp Snapcenter Server vulnerabilities

23 CVEs affecting Netapp Snapcenter Server, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-14800, published 2020-10-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-11023: JQuery Cross-Site Scripting (XSS) Vulnerability, published 2020-04-29. Medium severity, CVSS 6.1. Actively exploited: in CISA KEV since 2025-01-23. EPSS: 84.9% chance of exploitation in the next 30 days. In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation…
CVE-2016-8610, published 2017-11-13. High severity, CVSS 7.5. EPSS: 39.7% chance of exploitation in the next 30 days. A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote…
CVE-2018-8014, published 2018-05-16. Critical severity, CVSS 9.8. EPSS: 21.3% chance of exploitation in the next 30 days. The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all…
CVE-2020-14789, published 2020-10-21. Medium severity, CVSS 4.9. EPSS: 2.7% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability…
CVE-2020-14775, published 2020-10-21. Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows…
CVE-2020-14769, published 2020-10-21. Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily…
CVE-2020-14672, published 2020-10-21. Medium severity, CVSS 4.9. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior.…
CVE-2020-14790, published 2020-10-21. Medium severity, CVSS 4.9. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability…
CVE-2020-14794, published 2020-10-21. Medium severity, CVSS 4.9. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high…
CVE-2020-14793, published 2020-10-21. Medium severity, CVSS 4.9. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily…

Latest

CVE-2020-14800, published 2020-10-21. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows…
CVE-2020-14799, published 2020-10-21. Medium severity, CVSS 4.9. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows…
CVE-2020-14791, published 2020-10-21. Low severity, CVSS 2.2. EPSS: 1.6% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.21 and prior. Difficult to exploit vulnerability allows high privileged…
CVE-2020-14786, published 2020-10-21. Medium severity, CVSS 4.9. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged…
CVE-2020-14785, published 2020-10-21. Medium severity, CVSS 4.9. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high…
CVE-2020-14777, published 2020-10-21. Medium severity, CVSS 4.9. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high…