Element Plug-in For Vcenter Server vulnerabilities

Product

Element Plug-in For Vcenter Server

by Netapp · last CVE Jul 7, 2022

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 2Medium 3Low 3

Severity

Exploitation

Watch

Add Element Plug-in For Vcenter Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-34428	3.5	1%	Jun 22	For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in… Affected: All versions, or not specified
CVE-2022-2047	2.7	1%	Jul 7	In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI… Affected: All versions, or not specified
CVE-2021-28163	2.7	4%	Apr 1	In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory… Affected: All versions, or not specified