O9
Product
Oceanstor 9000 Firmware
On CISA KEVExploited in the wild
3
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 1
Watch
Add Oceanstor 9000 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3081 In wildKEV | 8.1 | Apr 26 | Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method:… Affected: v100r001c01; v100r001c30; v300r005c00 |
| CVE-2020-8840 | 9.8 | Feb 10 | FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter Affected: v300r006c20; v300r006c20spc100; v300r006c20spc200; v300r006c20spc300 |
| CVE-2015-2808 | 3.7 | Apr 1 | The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for… Affected: All versions, or not specified |
Showing 3