7-Mode Transition Tool vulnerabilities | LiveThreat CVE Feed

Product

7-Mode Transition Tool

by NetApp · last CVE Jul 18, 2023

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities75 In the news0 Timeline

Severity mix

Critical 1High 12Medium 37Low 25

Severity

All severities75 Critical1 High12 Medium37 Low25

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add 7-Mode Transition Tool to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-8735 In wildKEV	9.8	90%	Apr 6	Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if… Affected: All versions, or not specified
CVE-2017-12615 RansomwareIn wildKEV	8.1	100%	Sep 19	When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g Affected: All versions, or not specified
CVE-2020-14664	8.3	4%	Jul 15	Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX) Affected: All versions, or not specified
CVE-2020-14583	8.3	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-2805	8.3	4%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-2803	8.3	6%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2023-28709	7.5	48%	May 22	The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87 Affected: All versions, or not specified
CVE-2022-34169	7.5	82%	Jul 19	The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets Affected: All versions, or not specified
CVE-2022-21449	7.5	77%	Apr 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-2816	7.5	3%	Apr 15	Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2016-1000338	7.5	2%	Jun 1	In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification Affected: All versions, or not specified
CVE-2023-21930	7.4	1%	Apr 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2020-14593	7.4	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: All versions, or not specified
CVE-2018-5489	6.5	1%	Aug 3	NetApp 7-Mode Transition Tool allows users with valid credentials to access functions and information which may have been intended to be restricted to administrators or privileged… Affected: Versions below 2.0
CVE-2023-21967	5.9	2%	Apr 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2023-21954	5.9	1%	Apr 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2022-21541	5.9	3%	Jul 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2023-21939	5.3	2%	Apr 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: All versions, or not specified
CVE-2022-21628	5.3	3%	Oct 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server) Affected: All versions, or not specified
CVE-2022-21618	5.3	3%	Oct 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS) Affected: All versions, or not specified
CVE-2022-21626	5.3	2%	Oct 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: All versions, or not specified
CVE-2022-21549	5.3	3%	Jul 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21540	5.3	4%	Jul 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2022-21434	5.3	2%	Apr 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21426	5.3	3%	Apr 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21366	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21365	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21360	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21349	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: All versions, or not specified
CVE-2022-21341	5.3	4%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified
CVE-2022-21340	5.3	8%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21305	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2022-21299	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21296	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21294	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21293	5.3	8%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21291	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2022-21283	5.3	4%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21282	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21277	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21271	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-14803	5.3	3%	Oct 21	Vulnerability in the Java SE product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-14621	5.3	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2020-2830	5.3	5%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency) Affected: All versions, or not specified
CVE-2020-2781	5.3	5%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2023-22041	5.1	0%	Jul 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2020-14556	4.8	3%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-2800	4.8	3%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server) Affected: All versions, or not specified
CVE-2020-2767	4.8	2%	Apr 15	Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2020-14792	4.2	2%	Oct 21	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified