E-series Santricity Web Services vulnerabilities | LiveThreat CVE Feed

Product

E-series Santricity Web Services

by Netapp · last CVE Apr 18, 2023

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities99 In the news0 Timeline

Severity mix

Critical 6High 18Medium 56Low 19

Severity

All severities99 Critical6 High18 Medium56 Low19

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add E-series Santricity Web Services to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-35567	6.8	3%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-2601	6.8	4%	Jan 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: All versions, or not specified
CVE-2017-10274	6.8	3%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: All versions, or not specified
CVE-2017-10356	6.2	1%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified
CVE-2017-10293	6.1	1%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc) Affected: All versions, or not specified
CVE-2021-35550	5.9	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2020-2585	5.9	3%	Jan 15	Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX) Affected: All versions, or not specified
CVE-2021-3522	5.5	5%	Jun 2	GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags Affected: All versions, or not specified
CVE-2023-26049	5.3	1%	Apr 18	Jetty is a java based web server and servlet engine Affected: All versions, or not specified
CVE-2022-21496	5.3	3%	Apr 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI) Affected: All versions, or not specified
CVE-2022-21434	5.3	2%	Apr 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21426	5.3	3%	Apr 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21366	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21365	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21360	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21349	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: All versions, or not specified
CVE-2022-21341	5.3	4%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified
CVE-2022-21340	5.3	8%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21305	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2022-21299	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21296	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21294	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21293	5.3	8%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21291	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2022-21283	5.3	4%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21282	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21277	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21271	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2021-35586	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2021-35578	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2021-35565	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2021-35564	5.3	6%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool) Affected: All versions, or not specified
CVE-2021-35561	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility) Affected: All versions, or not specified
CVE-2021-35559	5.3	16%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: All versions, or not specified
CVE-2021-35556	5.3	8%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: All versions, or not specified
CVE-2021-34429	5.3	99%	Jul 15	For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or… Affected: All versions, or not specified
CVE-2021-28164	5.3	82%	Apr 1	In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources… Affected: All versions, or not specified
CVE-2020-27223	5.3	78%	Feb 26	In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of… Affected: All versions, or not specified
CVE-2020-14621	5.3	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2020-2830	5.3	5%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency) Affected: All versions, or not specified
CVE-2020-2781	5.3	5%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2019-13118	5.3	5%	Jul 1	In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to… Affected: All versions, or not specified
CVE-2019-7317	5.3	9%	Feb 4	png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute Affected: before 4.0
CVE-2017-10357	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified
CVE-2017-10355	5.3	16%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: All versions, or not specified
CVE-2017-10350	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS) Affected: All versions, or not specified
CVE-2017-10349	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: All versions, or not specified
CVE-2017-10348	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified
CVE-2017-10347	5.3	3%	Oct 19	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified
CVE-2017-10281	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified