Netapp Symantec Netbackup vulnerabilities

2 CVEs affecting Netapp Symantec Netbackup, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7595, published 2020-01-21.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-7595, published 2020-01-21. High severity, CVSS 7.5. EPSS: 7.8% chance of exploitation in the next 30 days. xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
• CVE-2016-9841, published 2017-05-23. Critical severity, CVSS 9.8. EPSS: 7.6% chance of exploitation in the next 30 days. inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.