ES
Product
E-series Santricity OS Controller
On CISA KEVExploited in the wild
242
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 32High 58Medium 107Low 45
Watch
Add E-series Santricity OS Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-13272 In wildKEV | 7.8 | Jul 17 | Linux Kernel Improper Privilege Management Vulnerability Affected: 11.0.0 through 11.60.3 |
| CVE-2021-26995 | 8.8 | Jun 11 | E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow privileged attackers to… Affected: 11.0.0 before 11.70.1 |
| CVE-2019-12257 | 8.8 | Aug 9 | Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component Affected: 8.00 through 8.40.50.00 |
| CVE-2018-12538 | 8.8 | Jun 22 | In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a… Affected: 11.0 through 11.40 |
| CVE-2021-3517 | 8.6 | May 19 | There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11 Affected: 11.0.0 through 11.70.1 |
| CVE-2020-14664 | 8.3 | Jul 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX) Affected: 11.0.0 through 11.70.2 |
| CVE-2020-14583 | 8.3 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 11.0.0 through 11.70.2 |
| CVE-2020-2805 | 8.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 11.0.0 through 11.70.2 |
| CVE-2020-2803 | 8.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 11.0.0 through 11.70.2 |
| CVE-2018-2964 | 8.3 | Jul 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 11.0 through 11.70.1 |
| CVE-2018-2942 | 8.3 | Jul 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL) Affected: 11.0 through 11.70.1 |
| CVE-2018-2941 | 8.3 | Jul 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 11.0 through 11.70.1 |
| CVE-2018-2826 | 8.3 | Apr 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: 11.0 through 11.40 |
| CVE-2018-2825 | 8.3 | Apr 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: 11.0 through 11.40 |
| CVE-2018-2638 | 8.3 | Jan 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 11.0 through 11.70.1 |
| CVE-2017-10116 | 8.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 11.0 through 11.70.1 |
| CVE-2017-10114 | 8.3 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 11.0 through 11.70.1 |
| CVE-2017-10074 | 8.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 11.0 through 11.70.1 |
| CVE-2024-6387 | 8.1 | Jul 1 | Openssh: regresshion - race condition in ssh allows rce/dos Affected: 11.0.0 through 11.70.2 |
| CVE-2020-2604 | 8.1 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 11.0.0 through 11.60.1 |
| CVE-2019-12263 | 8.1 | Aug 9 | Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4) Affected: 8.00 through 8.40.50.00 |
| CVE-2019-13115 | 8.1 | Jul 16 | In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets… Affected: 11.0.0 through 11.70.1 |
| CVE-2018-5968 | 8.1 | Jan 22 | FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and… Affected: 11.0.0 through 11.60.3 |
| CVE-2017-10078 | 8.1 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting) Affected: 11.0 through 11.70.1 |
| CVE-2022-1678 | 7.5 | May 25 | An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote… Affected: 11.0 through 11.70.2 |
| CVE-2022-21476 | 7.5 | Apr 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 11.0.0 through 11.70.1 |
| CVE-2022-21449 | 7.5 | Apr 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 11.0 |
| CVE-2018-25032 | 7.5 | Mar 25 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches Affected: 11.0.0 through 11.70.2 |
| CVE-2021-45485 | 7.5 | Dec 25 | In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't… Affected: All versions, or not specified |
| CVE-2021-35560 | 7.5 | Oct 20 | Vulnerability in the Java SE product of Oracle Java SE (component: Deployment) Affected: 11.0.0 through 11.50.2 |
| CVE-2021-26996 | 7.5 | Jun 11 | E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to… Affected: 11.0.0 before 11.70.1 |
| CVE-2021-28165 | 7.5 | Apr 1 | In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame Affected: 11.0.0 before 11.70.1 |
| CVE-2021-3326 | 7.5 | Jan 27 | The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the… Affected: 11.0 through 11.60.3 |
| CVE-2020-8580 | 7.5 | Nov 6 | SANtricity OS Controller Software versions 11.30 and higher are susceptible to a vulnerability which allows an unauthenticated attacker with access to the system to cause a Denial… Affected: 11.30 before 11.60.3 |
| CVE-2020-2816 | 7.5 | Apr 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: 11.0.0 through 11.60.1 |
| CVE-2019-19069 | 7.5 | Nov 18 | A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory… Affected: 11.0.0 through 11.60.3 |
| CVE-2019-19061 | 7.5 | Nov 18 | A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory… Affected: 11.0; 11.0.0; 11.20; 11.25; 11.30; 11.30.5r3; +12 more |
| CVE-2019-19060 | 7.5 | Nov 18 | A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory… Affected: 11.0; 11.0.0; 11.20; 11.25; 11.30; 11.30.5r3; +12 more |
| CVE-2019-19053 | 7.5 | Nov 18 | A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory… Affected: 11.0; 11.0.0; 11.20; 11.25; 11.30; 11.30.5r3; +12 more |
| CVE-2019-19052 | 7.5 | Nov 18 | A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by… Affected: 11.0; 11.0.0; 11.20; 11.25; 11.30; 11.30.5r3; +12 more |
| CVE-2019-19050 | 7.5 | Nov 18 | A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory… Affected: 11.0.0 through 11.60.3 |
| CVE-2019-19044 | 7.5 | Nov 18 | Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory… Affected: 11.0; 11.0.0; 11.20; 11.25; 11.30; 11.30.5r3; +12 more |
| CVE-2019-12258 | 7.5 | Aug 9 | Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component Affected: 8.00 through 8.40.50.00 |
| CVE-2018-18066 | 7.5 | Oct 8 | snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to… Affected: 11.0 through 11.5 |
| CVE-2018-2627 | 7.5 | Jan 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer) Affected: 11.0 through 11.70.1 |
| CVE-2016-8610 | 7.5 | Nov 13 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection… Affected: 11.0 through 11.40 |
| CVE-2017-10388 | 7.5 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 11.0 through 11.70.1 |
| CVE-2017-10176 | 7.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 11.0 through 11.70.1 |
| CVE-2017-10118 | 7.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 11.0 through 11.70.1 |
| CVE-2017-10115 | 7.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 11.0 through 11.70.1 |