Netapp Windows Host Utilities vulnerabilities

2 CVEs affecting Netapp Windows Host Utilities, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-50602, published 2024-10-27.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-28757, published 2024-03-10. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
• CVE-2024-50602, published 2024-10-27. Medium severity, CVSS 5.9. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.