EP
Product
E-series Performance Analyzer
On CISA KEVExploited in the wild
61
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 27Medium 16Low 15
Watch
Add E-series Performance Analyzer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-13272 In wildKEV | 7.8 | Jul 17 | Linux Kernel Improper Privilege Management Vulnerability Affected: All versions, or not specified |
| CVE-2022-21703 | 8.8 | Feb 8 | Grafana is an open-source platform for monitoring and observability Affected: before 3.0 |
| CVE-2022-31097 | 8.7 | Jul 15 | Grafana is an open-source platform for monitoring and observability Affected: All versions, or not specified |
| CVE-2020-14664 | 8.3 | Jul 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX) Affected: All versions, or not specified |
| CVE-2020-14583 | 8.3 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2020-2805 | 8.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2020-2803 | 8.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2020-13379 | 8.2 | Jun 3 | The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue Affected: All versions, or not specified |
| CVE-2020-2604 | 8.1 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified |
| CVE-2022-31123 | 7.8 | Oct 13 | Grafana plugin signature bypass vulnerability Affected: All versions, or not specified |
| CVE-2021-3999 | 7.8 | Aug 24 | A flaw was found in glibc Affected: All versions, or not specified |
| CVE-2022-23491 | 7.5 | Dec 7 | Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts Affected: All versions, or not specified |
| CVE-2022-45061 | 7.5 | Nov 9 | An issue was discovered in Python before 3.11.1 Affected: All versions, or not specified |
| CVE-2022-31107 | 7.5 | Jul 15 | Grafana is an open-source platform for monitoring and observability Affected: All versions, or not specified |
| CVE-2021-4044 | 7.5 | Dec 14 | Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server Affected: All versions, or not specified |
| CVE-2021-33587 | 7.5 | May 28 | The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input Affected: All versions, or not specified |
| CVE-2021-33623 | 7.5 | May 28 | The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method Affected: All versions, or not specified |
| CVE-2021-28165 | 7.5 | Apr 1 | In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame Affected: before 3.0 |
| CVE-2021-21267 | 7.5 | Mar 19 | Schema-Inspector is an open-source tool to sanitize and validate JS objects (npm package schema-inspector) Affected: All versions, or not specified |
| CVE-2021-27358 | 7.5 | Mar 18 | The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used… Affected: All versions, or not specified |
| CVE-2021-22884 | 7.5 | Mar 3 | Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6” Affected: All versions, or not specified |
| CVE-2021-22883 | 7.5 | Mar 3 | Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established Affected: All versions, or not specified |
| CVE-2021-27219 | 7.5 | Feb 15 | An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3 Affected: All versions, or not specified |
| CVE-2021-27218 | 7.5 | Feb 15 | An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4 Affected: All versions, or not specified |
| CVE-2020-1967 | 7.5 | Apr 21 | Segmentation fault in SSL_check_chain Affected: All versions, or not specified |
| CVE-2020-2816 | 7.5 | Apr 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified |
| CVE-2020-14593 | 7.4 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: All versions, or not specified |
Showing 27