Oncommand Balance vulnerabilities | LiveThreat CVE Feed

Product

Oncommand Balance

by Netapp · last CVE Jan 16, 2019

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities83 In the news0 Timeline

Severity mix

Critical 19High 24Medium 35Low 3

Severity

All severities83 Critical19 High24 Medium35 Low3

Exploitation

On CISA KEV7 Exploited in the wild7

Watch

Add Oncommand Balance to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-10274	6.8	3%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: All versions, or not specified
CVE-2017-10198	6.8	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified
CVE-2017-10384	6.5	3%	Oct 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: All versions, or not specified
CVE-2017-10379	6.5	2%	Oct 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: All versions, or not specified
CVE-2017-10378	6.5	3%	Oct 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified
CVE-2017-10243	6.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS) Affected: All versions, or not specified
CVE-2015-7855	6.5	31%	Aug 7	The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7… Affected: All versions, or not specified
CVE-2015-7850	6.5	6%	Aug 7	ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the… Affected: All versions, or not specified
CVE-2015-7973	6.5	3%	Jan 30	NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network Affected: All versions, or not specified
CVE-2017-15707	6.2	5%	Dec 1	In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially… Affected: All versions, or not specified
CVE-2017-10356	6.2	1%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified
CVE-2017-10293	6.1	1%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc) Affected: All versions, or not specified
CVE-2017-3136	5.9	11%	Jan 16	An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;" Affected: All versions, or not specified
CVE-2017-3140	5.9	12%	Jan 16	An error processing RPZ rules can cause named to loop endlessly after handling a query Affected: All versions, or not specified
CVE-2017-10135	5.9	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: All versions, or not specified
CVE-2015-7852	5.9	12%	Aug 7	ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets Affected: All versions, or not specified
CVE-2015-7977	5.9	6%	Jan 30	ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command Affected: All versions, or not specified
CVE-2017-3138	5.3	6%	Jan 16	named exits with a REQUIRE assertion failure if it receives a null command string on its control channel Affected: All versions, or not specified
CVE-2017-10357	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified
CVE-2017-10355	5.3	16%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: All versions, or not specified
CVE-2017-10350	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS) Affected: All versions, or not specified
CVE-2017-10349	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: All versions, or not specified
CVE-2017-10348	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified
CVE-2017-10347	5.3	3%	Oct 19	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified
CVE-2017-10281	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified
CVE-2017-10109	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified
CVE-2017-10108	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified
CVE-2017-10053	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D) Affected: All versions, or not specified
CVE-2016-2518	5.3	15%	Jan 30	The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large… Affected: All versions, or not specified
CVE-2017-10320	4.9	2%	Oct 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB) Affected: All versions, or not specified
CVE-2017-10286	4.4	2%	Oct 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB) Affected: All versions, or not specified
CVE-2017-10105	4.3	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified
CVE-2017-10081	4.3	2%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: All versions, or not specified
CVE-2017-10268	4.1	1%	Oct 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: All versions, or not specified
CVE-2017-10295	4.0	2%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: All versions, or not specified