Login Request a demo
OA
Product
Oncommand Api Services
by Netapp · last CVE Mar 30, 2021
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 10High 6Medium 3Low 0
Severity
All severities19Critical10High6Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Oncommand Api Services to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-10683
9.8
7%
May 1
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks
Affected: All versions, or not specified
CVE-2019-14893
9.8
4%
Mar 2
A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the…
Affected: All versions, or not specified
CVE-2020-8840
9.8
27%
Feb 10
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter
Affected: All versions, or not specified
CVE-2019-20330
9.8
9%
Jan 3
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking
Affected: All versions, or not specified
CVE-2019-17267
9.8
5%
Oct 6
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10
Affected: All versions, or not specified
CVE-2019-16943
9.8
5%
Oct 1
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10
Affected: All versions, or not specified
CVE-2019-16942
9.8
6%
Oct 1
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10
Affected: All versions, or not specified
CVE-2019-16335
9.8
5%
Sep 15
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10
Affected: All versions, or not specified
CVE-2019-14540
9.8
11%
Sep 15
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10
Affected: All versions, or not specified
CVE-2017-5645
9.8
89%
Apr 17
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary…
Affected: All versions, or not specified
Showing 10