Netapp SRA Plugin vulnerabilities

2 CVEs affecting Netapp SRA Plugin, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-13596, published 2020-06-03.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-13254, published 2020-06-03. Medium severity, CVSS 5.9. EPSS: 6.1% chance of exploitation in the next 30 days. An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key…
• CVE-2020-13596, published 2020-06-03. Medium severity, CVSS 6.1. EPSS: 2.9% chance of exploitation in the next 30 days. An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameters generated by the Django admin ForeignKeyRawIdWidget were not properly URL encoded, leading to a possibility…