SN
Product
Snapmanager
On CISA KEVExploited in the wild
180
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 20High 50Medium 75Low 35
Watch
Add Snapmanager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-39144 In wildKEV | 8.5 | Aug 23 | XStream is vulnerable to a Remote Command Execution attack Affected: All versions, or not specified |
| CVE-2022-23305 | 9.8 | Jan 18 | By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout Affected: All versions, or not specified |
| CVE-2020-10683 | 9.8 | May 1 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks Affected: All versions, or not specified |
| CVE-2019-11068 | 9.8 | Apr 10 | libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code Affected: All versions, or not specified |
| CVE-2017-7658 | 9.8 | Jun 26 | In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths… Affected: All versions, or not specified |
| CVE-2017-7657 | 9.8 | Jun 26 | In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled… Affected: before 3.4.2; before 3.4.2 |
| CVE-2016-9841 | 9.8 | May 23 | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: All versions, or not specified |
| CVE-2017-10346 | 9.6 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: All versions, or not specified |
| CVE-2017-10285 | 9.6 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: All versions, or not specified |
| CVE-2017-10111 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified |
| CVE-2017-10110 | 9.6 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) Affected: All versions, or not specified |
| CVE-2017-10107 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: All versions, or not specified |
| CVE-2017-10101 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: All versions, or not specified |
| CVE-2017-10096 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: All versions, or not specified |
| CVE-2017-10090 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified |
| CVE-2017-10089 | 9.6 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO) Affected: All versions, or not specified |
| CVE-2017-10087 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified |
| CVE-2017-10086 | 9.6 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: All versions, or not specified |
| CVE-2021-23926 | 9.1 | Jan 14 | The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input Affected: All versions, or not specified |
| CVE-2018-2938 | 9.0 | Jul 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB) Affected: All versions, or not specified |
| CVE-2017-10102 | 9.0 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: All versions, or not specified |
| CVE-2022-23302 | 8.8 | Jan 18 | JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration… Affected: All versions, or not specified |
| CVE-2021-39139 | 8.8 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified |
| CVE-2021-29505 | 8.8 | May 28 | XStream is vulnerable to a Remote Command Execution attack Affected: All versions, or not specified |
| CVE-2020-26217 | 8.8 | Nov 16 | Remote Code Execution in XStream Affected: All versions, or not specified |
| CVE-2018-12538 | 8.8 | Jun 22 | In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a… Affected: All versions, or not specified |
| CVE-2021-3517 | 8.6 | May 19 | There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11 Affected: All versions, or not specified |
| CVE-2021-39150 | 8.5 | Aug 23 | A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling Affected: All versions, or not specified |
| CVE-2021-39152 | 8.5 | Aug 23 | A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling Affected: All versions, or not specified |
| CVE-2021-39149 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified |
| CVE-2021-39148 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified |
| CVE-2021-39147 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified |
| CVE-2021-39146 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified |
| CVE-2021-39145 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified |
| CVE-2021-39141 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified |
| CVE-2021-39153 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified |
| CVE-2021-39151 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified |
| CVE-2021-39154 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified |
| CVE-2020-14664 | 8.3 | Jul 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX) Affected: All versions, or not specified |
| CVE-2020-14583 | 8.3 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2020-2805 | 8.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2020-2803 | 8.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2018-2964 | 8.3 | Jul 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified |
| CVE-2018-2942 | 8.3 | Jul 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL) Affected: All versions, or not specified |
| CVE-2018-2941 | 8.3 | Jul 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: All versions, or not specified |
| CVE-2018-2826 | 8.3 | Apr 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified |
| CVE-2018-2825 | 8.3 | Apr 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified |
| CVE-2018-2638 | 8.3 | Jan 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified |
| CVE-2017-10116 | 8.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified |
| CVE-2017-10114 | 8.3 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: All versions, or not specified |