ES
Product
E-series Santricity OS Controller
On CISA KEVExploited in the wild
242
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 32High 58Medium 107Low 45
Watch
Add E-series Santricity OS Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-6387 | 8.1 | Jul 1 | Openssh: regresshion - race condition in ssh allows rce/dos Affected: 11.0.0 through 11.70.2 |
| CVE-2020-2604 | 8.1 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 11.0.0 through 11.60.1 |
| CVE-2019-12263 | 8.1 | Aug 9 | Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4) Affected: 8.00 through 8.40.50.00 |
| CVE-2019-13115 | 8.1 | Jul 16 | In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets… Affected: 11.0.0 through 11.70.1 |
| CVE-2018-5968 | 8.1 | Jan 22 | FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and… Affected: 11.0.0 through 11.60.3 |
| CVE-2017-10078 | 8.1 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting) Affected: 11.0 through 11.70.1 |
| CVE-2022-1678 | 7.5 | May 25 | An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote… Affected: 11.0 through 11.70.2 |
| CVE-2022-21476 | 7.5 | Apr 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 11.0.0 through 11.70.1 |
| CVE-2022-21449 | 7.5 | Apr 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 11.0 |
| CVE-2018-25032 | 7.5 | Mar 25 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches Affected: 11.0.0 through 11.70.2 |
| CVE-2021-45485 | 7.5 | Dec 25 | In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't… Affected: All versions, or not specified |
| CVE-2021-35560 | 7.5 | Oct 20 | Vulnerability in the Java SE product of Oracle Java SE (component: Deployment) Affected: 11.0.0 through 11.50.2 |
| CVE-2021-26996 | 7.5 | Jun 11 | E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to… Affected: 11.0.0 before 11.70.1 |
| CVE-2021-28165 | 7.5 | Apr 1 | In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame Affected: 11.0.0 before 11.70.1 |
| CVE-2021-3326 | 7.5 | Jan 27 | The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the… Affected: 11.0 through 11.60.3 |
| CVE-2020-8580 | 7.5 | Nov 6 | SANtricity OS Controller Software versions 11.30 and higher are susceptible to a vulnerability which allows an unauthenticated attacker with access to the system to cause a Denial… Affected: 11.30 before 11.60.3 |
| CVE-2020-2816 | 7.5 | Apr 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: 11.0.0 through 11.60.1 |
| CVE-2019-19069 | 7.5 | Nov 18 | A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory… Affected: 11.0.0 through 11.60.3 |
| CVE-2019-19061 | 7.5 | Nov 18 | A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory… Affected: 11.0; 11.0.0; 11.20; 11.25; 11.30; 11.30.5r3; +12 more |
| CVE-2019-19060 | 7.5 | Nov 18 | A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory… Affected: 11.0; 11.0.0; 11.20; 11.25; 11.30; 11.30.5r3; +12 more |
| CVE-2019-19053 | 7.5 | Nov 18 | A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory… Affected: 11.0; 11.0.0; 11.20; 11.25; 11.30; 11.30.5r3; +12 more |
| CVE-2019-19052 | 7.5 | Nov 18 | A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by… Affected: 11.0; 11.0.0; 11.20; 11.25; 11.30; 11.30.5r3; +12 more |
| CVE-2019-19050 | 7.5 | Nov 18 | A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory… Affected: 11.0.0 through 11.60.3 |
| CVE-2019-19044 | 7.5 | Nov 18 | Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory… Affected: 11.0; 11.0.0; 11.20; 11.25; 11.30; 11.30.5r3; +12 more |
| CVE-2019-12258 | 7.5 | Aug 9 | Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component Affected: 8.00 through 8.40.50.00 |
| CVE-2018-18066 | 7.5 | Oct 8 | snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to… Affected: 11.0 through 11.5 |
| CVE-2018-2627 | 7.5 | Jan 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer) Affected: 11.0 through 11.70.1 |
| CVE-2016-8610 | 7.5 | Nov 13 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection… Affected: 11.0 through 11.40 |
| CVE-2017-10388 | 7.5 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 11.0 through 11.70.1 |
| CVE-2017-10176 | 7.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 11.0 through 11.70.1 |
| CVE-2017-10118 | 7.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 11.0 through 11.70.1 |
| CVE-2017-10115 | 7.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 11.0 through 11.70.1 |
| CVE-2017-10067 | 7.5 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security) Affected: 11.0 through 11.70.1 |
| CVE-2021-20322 | 7.4 | Feb 18 | A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP… Affected: 11.0 through 11.70.1 |
| CVE-2021-3712 | 7.4 | Aug 24 | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length Affected: 11.0 through 11.50.2 |
| CVE-2020-14593 | 7.4 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: 11.0.0 through 11.70.2 |
| CVE-2017-10309 | 7.1 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 11.0 through 11.70.1 |
| CVE-2017-10125 | 7.1 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 11.0 through 11.70.1 |
| CVE-2016-10165 | 7.1 | Feb 3 | The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted… Affected: 11.0; 11.0.0; 11.20; 11.25; 11.30; 11.30.5r3; +12 more |
| CVE-2019-18683 | 7.0 | Nov 4 | An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8 Affected: 11.0.0 through 11.70.1 |
| CVE-2021-4203 | 6.8 | Mar 25 | A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel Affected: 11.0.0 through 11.70.2 |
| CVE-2021-35567 | 6.8 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 11.0.0 through 11.50.2 |
| CVE-2021-21284 | 6.8 | Feb 2 | In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege escalation to real root Affected: 11.0.0 through 11.60.3 |
| CVE-2020-2601 | 6.8 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 11.0.0 through 11.60.3 |
| CVE-2019-2989 | 6.8 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: 11.0.0 through 11.50.2 |
| CVE-2019-2949 | 6.8 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos) Affected: 11.0.0 through 11.50.2 |
| CVE-2017-10274 | 6.8 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: 11.0 through 11.70.1 |
| CVE-2017-10198 | 6.8 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 11.0 through 11.70.1 |
| CVE-2021-3772 | 6.5 | Mar 2 | A flaw was found in the Linux SCTP stack Affected: 11.0; 11.0.0; 11.20; 11.25; 11.30; 11.30.5r3; +12 more |
| CVE-2021-26997 | 6.5 | Jun 11 | E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to… Affected: 11.0.0 before 11.70.1 |