ES
Product
E-series Santricity OS Controller
On CISA KEVExploited in the wild
242
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 32High 58Medium 107Low 45
Watch
Add E-series Santricity OS Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-35564 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool) Affected: 11.0.0 through 11.50.2 |
| CVE-2021-35561 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility) Affected: 11.0.0 through 11.50.2 |
| CVE-2021-35559 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: 11.0.0 through 11.50.2 |
| CVE-2021-35556 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: 11.0.0 through 11.50.2 |
| CVE-2021-34429 | 5.3 | Jul 15 | For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or… Affected: 11.0 through 11.70.1 |
| CVE-2021-26993 | 5.3 | Jun 11 | E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to… Affected: 11.0.0 before 11.70.1 |
| CVE-2021-28164 | 5.3 | Apr 1 | In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources… Affected: 11.0 through 11.70.1 |
| CVE-2020-27223 | 5.3 | Feb 26 | In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of… Affected: 11.0.0 through 11.70.1 |
| CVE-2020-14803 | 5.3 | Oct 21 | Vulnerability in the Java SE product of Oracle Java SE (component: Libraries) Affected: 11.0.0 through 11.60.1 |
| CVE-2020-14621 | 5.3 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP) Affected: 11.0.0 through 11.70.2 |
| CVE-2020-14562 | 5.3 | Jul 15 | Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO) Affected: 11.0.0 through 11.50.2 |
| CVE-2020-2830 | 5.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency) Affected: 11.0.0 through 11.60.1 |
| CVE-2020-2781 | 5.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: 11.0.0 through 11.70.2 |
| CVE-2019-18282 | 5.3 | Jan 16 | The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f Affected: 11.0.0 through 11.70.1 |
| CVE-2019-12265 | 5.3 | Aug 9 | Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component Affected: 8.00 through 8.40.50.00 |
| CVE-2019-13118 | 5.3 | Jul 1 | In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to… Affected: 11.0 through 11.50.2 |
| CVE-2017-10357 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization) Affected: 11.0 through 11.70.1 |
| CVE-2017-10355 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 11.0 through 11.70.1 |
| CVE-2017-10350 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS) Affected: 11.0 through 11.70.1 |
| CVE-2017-10349 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 11.0 through 11.70.1 |
| CVE-2017-10348 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 11.0 through 11.70.1 |
| CVE-2017-10347 | 5.3 | Oct 19 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 11.0 through 11.70.1 |
| CVE-2017-10281 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 11.0 through 11.70.1 |
| CVE-2017-10109 | 5.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 11.0 through 11.70.1 |
| CVE-2017-10108 | 5.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 11.0 through 11.70.1 |
| CVE-2017-10053 | 5.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D) Affected: 11.0 through 11.70.1 |
| CVE-2020-29562 | 4.8 | Dec 4 | The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and… Affected: 11.0.0 through 11.60.3 |
| CVE-2020-14556 | 4.8 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 11.0.0 through 11.70.2 |
| CVE-2020-2800 | 4.8 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server) Affected: 11.0.0 through 11.70.2 |
| CVE-2020-2767 | 4.8 | Apr 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: 11.0.0 through 11.70.2 |
| CVE-2020-2593 | 4.8 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: 11.0.0 through 11.60.3 |
| CVE-2019-2977 | 4.8 | Oct 16 | Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot) Affected: 11.0.0 through 11.50.2 |
| CVE-2019-2975 | 4.8 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting) Affected: 11.0.0 through 11.50.2 |
| CVE-2019-19965 | 4.7 | Dec 25 | In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related… Affected: 11.0.0 through 11.70.1 |
| CVE-2019-19054 | 4.7 | Nov 18 | A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory… Affected: 11.0; 11.0.0; 11.20; 11.25; 11.30; 11.30.5r3; +12 more |
| CVE-2019-2999 | 4.7 | Oct 16 | Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc) Affected: 11.0.0 through 11.50.2 |
| CVE-2018-2581 | 4.7 | Jan 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 11.0 through 11.70.1 |
| CVE-2019-19966 | 4.6 | Dec 25 | In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655 Affected: 11.0 through 11.70.2 |
| CVE-2019-19947 | 4.6 | Dec 24 | In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka… Affected: 11.0 through 11.70.2 |
| CVE-2019-19063 | 4.6 | Nov 18 | Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service… Affected: 11.0; 11.0.0; 11.20; 11.25; 11.30; 11.30.5r3; +12 more |
| CVE-2022-23236 | 4.4 | Jun 2 | E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users Affected: 11.40 through 11.70.2 |
| CVE-2018-2940 | 4.3 | Jul 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 11.0 through 11.70.1 |
| CVE-2017-10105 | 4.3 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 11.0 through 11.70.1 |
| CVE-2017-10081 | 4.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 11.0 through 11.70.1 |
| CVE-2020-14792 | 4.2 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot) Affected: 11.0.0 through 11.60.1 |
| CVE-2019-2996 | 4.2 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment) Affected: 11.0.0 through 11.50.2 |
| CVE-2017-10295 | 4.0 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 11.0 through 11.70.1 |
| CVE-2022-39399 | 3.7 | Oct 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 11.0 through 11.70.2 |
| CVE-2022-21624 | 3.7 | Oct 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI) Affected: 11.0 through 11.70.2 |
| CVE-2022-21619 | 3.7 | Oct 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 11.0 before 11.70.2; 11.70.2 |