SN
Product
SnapCenter
On CISA KEVExploited in the wildRansomware-linked
576
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 27High 44Medium 429Low 0
Watch
Add SnapCenter to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-3247 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge) Affected: All versions, or not specified |
| CVE-2018-3195 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: All versions, or not specified |
| CVE-2018-3187 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2018-3185 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified |
| CVE-2018-8026 | 5.5 | Jul 5 | This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enumsConfig.xml referred… Affected: All versions, or not specified |
| CVE-2018-2812 | 5.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-21987 | 5.4 | Feb 16 | SnapCenter versions 4.8 prior to 5.0 are susceptible to a vulnerability which could allow an authenticated SnapCenter Server user to modify system logging configuration settings Affected: 4.8 before 5.0 |
| CVE-2021-29489 | 5.4 | May 5 | Highcharts JS is a JavaScript charting library based on SVG Affected: All versions, or not specified |
| CVE-2020-4051 | 5.4 | Jun 15 | In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to… Affected: All versions, or not specified |
| CVE-2024-20994 | 5.3 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema) Affected: All versions, or not specified |
| CVE-2023-21971 | 5.3 | Apr 18 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J) Affected: All versions, or not specified |
| CVE-2022-2097 | 5.3 | Jul 5 | AES OCB fails to encrypt some bytes Affected: 0 |
| CVE-2022-21302 | 5.3 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2022-21254 | 5.3 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-35608 | 5.3 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin) Affected: All versions, or not specified |
| CVE-2021-28164 | 5.3 | Apr 1 | In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources… Affected: All versions, or not specified |
| CVE-2020-27223 | 5.3 | Feb 26 | In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of… Affected: All versions, or not specified |
| CVE-2021-3281 | 5.3 | Feb 2 | In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows… Affected: All versions, or not specified |
| CVE-2020-13956 | 5.3 | Dec 2 | Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick… Affected: All versions, or not specified |
| CVE-2020-2806 | 5.3 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling) Affected: All versions, or not specified |
| CVE-2020-2752 | 5.3 | Apr 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: All versions, or not specified |
| CVE-2019-2993 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API) Affected: All versions, or not specified |
| CVE-2019-2924 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2019-2923 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2019-2922 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2019-10247 | 5.3 | Apr 22 | In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured… Affected: All versions, or not specified |
| CVE-2019-10246 | 5.3 | Apr 22 | In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a… Affected: All versions, or not specified |
| CVE-2018-3174 | 5.3 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: All versions, or not specified |
| CVE-2018-3074 | 5.3 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles) Affected: All versions, or not specified |
| CVE-2018-3062 | 5.3 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached) Affected: All versions, or not specified |
| CVE-2022-21539 | 5.0 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2022-21418 | 5.0 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2021-35602 | 5.0 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options) Affected: All versions, or not specified |
| CVE-2021-2385 | 5.0 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: All versions, or not specified |
| CVE-2021-2048 | 5.0 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2019-2536 | 5.0 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: All versions, or not specified |
| CVE-2018-3081 | 5.0 | Jul 18 | Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs) Affected: All versions, or not specified |
| CVE-2025-21583 | 4.9 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: All versions, or not specified |
| CVE-2024-21102 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling) Affected: All versions, or not specified |
| CVE-2024-21096 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump) Affected: All versions, or not specified |
| CVE-2024-21087 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin) Affected: All versions, or not specified |
| CVE-2024-21069 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: All versions, or not specified |
| CVE-2024-21062 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-21061 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in) Affected: All versions, or not specified |
| CVE-2024-21060 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary) Affected: All versions, or not specified |
| CVE-2024-21055 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-21054 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-21047 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2024-21009 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-20998 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)