ES
Product
E-series Santricity OS Controller
On CISA KEVExploited in the wild
242
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 32High 58Medium 107Low 45
Watch
Add E-series Santricity OS Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-43527 | 9.8 | Dec 8 | NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures Affected: 11.0 through 11.70.1 |
| CVE-2021-3711 | 9.8 | Aug 24 | SM2 Decryption Buffer Overflow Affected: 11.0 through 11.50.2 |
| CVE-2021-33574 | 9.8 | May 25 | The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free Affected: 11.0 through 11.70.1 |
| CVE-2019-18805 | 9.8 | Nov 7 | An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11 Affected: 11.0.0 through 11.60.3 |
| CVE-2019-12261 | 9.8 | Aug 9 | Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4) Affected: 8.00 through 8.40.50.00 |
| CVE-2019-12260 | 9.8 | Aug 9 | Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4) Affected: 8.00 through 8.40.50.00 |
| CVE-2019-12255 | 9.8 | Aug 9 | Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4) Affected: 8.00 through 8.40.50.00 |
| CVE-2019-12256 | 9.8 | Aug 9 | Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component Affected: 8.00 through 8.40.50.00 |
| CVE-2019-11068 | 9.8 | Apr 10 | libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code Affected: 11.0 through 11.70.2 |
| CVE-2018-18314 | 9.8 | Dec 7 | Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations Affected: 11.0 through 11.40 |
| CVE-2018-18311 | 9.8 | Dec 7 | Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations Affected: All versions, or not specified |
| CVE-2018-18312 | 9.8 | Dec 5 | Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations Affected: 11.0 through 11.40 |
| CVE-2018-5492 | 9.8 | Oct 4 | NetApp E-Series SANtricity OS Controller Software 11.30 and later version 11.30.5 is susceptible to unauthenticated remote code execution Affected: 11.0 through 11.40 |
| CVE-2017-7658 | 9.8 | Jun 26 | In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths… Affected: 11.0 through 11.50.1 |
| CVE-2017-7657 | 9.8 | Jun 26 | In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled… Affected: 11.0 through 11.50.1 |
| CVE-2017-17485 | 9.8 | Jan 10 | FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization… Affected: 11.0.0 through 11.60.3 |
| CVE-2016-9841 | 9.8 | May 23 | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: 11.0.0 through 11.70.1 |
| CVE-2017-10346 | 9.6 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 11.0 through 11.70.1 |
| CVE-2017-10285 | 9.6 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 11.0 through 11.70.1 |
| CVE-2017-10111 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 11.0 through 11.70.1 |
| CVE-2017-10110 | 9.6 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) Affected: 11.0 through 11.70.1 |
| CVE-2017-10107 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 11.0 through 11.70.1 |
| CVE-2017-10101 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 11.0 through 11.70.1 |
| CVE-2017-10096 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 11.0 through 11.70.1 |
| CVE-2017-10090 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 11.0 through 11.70.1 |
| CVE-2017-10089 | 9.6 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO) Affected: 11.0 through 11.70.1 |
| CVE-2017-10087 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 11.0 through 11.70.1 |
| CVE-2017-10086 | 9.6 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 11.0 through 11.70.1 |
| CVE-2021-35942 | 9.1 | Jul 22 | The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted… Affected: 11.0 through 11.70.1 |
| CVE-2018-18313 | 9.1 | Dec 7 | Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory Affected: 11.0 through 11.40 |
| CVE-2018-2938 | 9.0 | Jul 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB) Affected: 11.0 through 11.70.1 |
| CVE-2017-10102 | 9.0 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 11.0 through 11.70.1 |
Showing 32