Cloud Secure Agent vulnerabilities | LiveThreat CVE Feed

Product

Cloud Secure Agent

by Netapp · last CVE Oct 18, 2022

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities57 In the news0 Timeline

Severity mix

Critical 2High 8Medium 33Low 14

Severity

All severities57 Critical2 High8 Medium33 Low14

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Cloud Secure Agent to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-44228 RansomwareIn wildKEV	10.0	100%	Dec 10	Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints Affected: All versions, or not specified
CVE-2019-13990	9.8	17%	Jul 26	initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description Affected: All versions, or not specified
CVE-2020-14664	8.3	4%	Jul 15	Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX) Affected: All versions, or not specified
CVE-2020-14583	8.3	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-1319	7.5	2%	Aug 31	A flaw was found in Undertow Affected: All versions, or not specified
CVE-2022-1259	7.5	1%	Aug 31	A flaw was found in Undertow Affected: All versions, or not specified
CVE-2021-3859	7.5	2%	Aug 26	A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2 Affected: All versions, or not specified
CVE-2022-34169	7.5	82%	Jul 19	The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets Affected: All versions, or not specified
CVE-2022-21476	7.5	4%	Apr 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-14593	7.4	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: All versions, or not specified
CVE-2022-22971	6.5	3%	May 12	In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack… Affected: All versions, or not specified
CVE-2022-21541	5.9	3%	Jul 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2021-21290	5.5	2%	Feb 8	Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files Affected: All versions, or not specified
CVE-2022-21626	5.3	2%	Oct 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: All versions, or not specified
CVE-2022-21618	5.3	3%	Oct 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS) Affected: All versions, or not specified
CVE-2022-21628	5.3	3%	Oct 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server) Affected: All versions, or not specified
CVE-2022-21549	5.3	3%	Jul 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21540	5.3	4%	Jul 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2022-22970	5.3	2%	May 12	In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data… Affected: All versions, or not specified
CVE-2022-21496	5.3	3%	Apr 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI) Affected: All versions, or not specified
CVE-2022-21434	5.3	2%	Apr 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21426	5.3	3%	Apr 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-22968	5.3	6%	Apr 14	In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a… Affected: All versions, or not specified
CVE-2022-21366	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21365	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21360	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21341	5.3	4%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified
CVE-2022-21340	5.3	8%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21305	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2022-21299	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21296	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21294	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21293	5.3	8%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21291	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2022-21283	5.3	4%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21282	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21277	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21271	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-14621	5.3	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2020-2781	5.3	5%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2022-2764	4.9	1%	Sep 1	A flaw was found in Undertow Affected: All versions, or not specified
CVE-2020-14556	4.8	3%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-2767	4.8	2%	Apr 15	Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2022-39399	3.7	2%	Oct 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: All versions, or not specified
CVE-2022-21619	3.7	3%	Oct 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: All versions, or not specified
CVE-2022-21624	3.7	2%	Oct 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI) Affected: All versions, or not specified
CVE-2022-21443	3.7	3%	Apr 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21248	3.7	4%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified
CVE-2020-14581	3.7	3%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: All versions, or not specified
CVE-2020-14579	3.7	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified