Santricity Cloud Connector vulnerabilities | LiveThreat CVE Feed

Product

Santricity Cloud Connector

by Netapp · last CVE Jun 22, 2021

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities27 In the news0 Timeline

Severity mix

Critical 2High 10Medium 8Low 7

Severity

All severities27 Critical2 High10 Medium8 Low7

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Santricity Cloud Connector to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-12538	8.8	3%	Jun 22	In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a… Affected: All versions, or not specified
CVE-2018-2826	8.3	5%	Apr 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified
CVE-2018-2825	8.3	4%	Apr 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified
CVE-2018-2638	8.3	3%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified
CVE-2017-15715	8.1	85%	Mar 26	In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the… Affected: All versions, or not specified
CVE-2021-28165	7.5	54%	Apr 1	In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame Affected: All versions, or not specified
CVE-2018-17199	7.5	20%	Jan 30	In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session Affected: All versions, or not specified
CVE-2018-1303	7.5	70%	Mar 26	A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared… Affected: All versions, or not specified
CVE-2017-15710	7.5	17%	Mar 26	In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup… Affected: All versions, or not specified
CVE-2018-2627	7.5	0%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer) Affected: All versions, or not specified