CM
Product
Cloud Manager
On CISA KEVExploited in the wildRansomware-linked
19
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 8Low 1
Watch
Add Cloud Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-42550 | 6.6 | Dec 16 | In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute… Affected: All versions, or not specified |
| CVE-2021-31807 | 6.5 | Jun 8 | An issue was discovered in Squid before 4.15 and 5.x before 5.0.6 Affected: All versions, or not specified |
| CVE-2021-31808 | 6.5 | May 27 | An issue was discovered in Squid before 4.15 and 5.x before 5.0.6 Affected: All versions, or not specified |
| CVE-2021-31806 | 6.5 | May 27 | An issue was discovered in Squid before 4.15 and 5.x before 5.0.6 Affected: All versions, or not specified |
| CVE-2021-45105 | 5.9 | Dec 18 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups Affected: All versions, or not specified |
| CVE-2021-28164 | 5.3 | Apr 1 | In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources… Affected: All versions, or not specified |
| CVE-2021-26999 | 4.3 | Aug 6 | NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory connection fails Affected: before 3.9.9 |
| CVE-2021-26998 | 4.3 | Aug 6 | NetApp Cloud Manager versions prior to 3.9.9 log sensitive information that is available only to authenticated users Affected: before 3.9.9 |
Showing 8