Snapmanager vulnerabilities | LiveThreat CVE Feed

Product

Snapmanager

by Netapp · last CVE Nov 23, 2022

On CISA KEVExploited in the wild

180

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities180 In the news0 Timeline

Severity mix

Critical 20High 50Medium 75Low 35

Severity

All severities180 Critical20 High50 Medium75 Low35

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Snapmanager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-35567	6.8	3%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2019-2989	6.8	3%	Oct 16	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: All versions, or not specified
CVE-2019-2949	6.8	4%	Oct 16	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos) Affected: All versions, or not specified
CVE-2017-10274	6.8	3%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: All versions, or not specified
CVE-2017-10198	6.8	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified
CVE-2022-29824	6.5	4%	May 3	In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf) and tree.c (xmlBuffer) don't check for integer overflows Affected: All versions, or not specified
CVE-2018-11212	6.5	5%	May 16	An issue was discovered in libjpeg 9a and 9d Affected: All versions, or not specified
CVE-2017-10243	6.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS) Affected: All versions, or not specified
CVE-2021-39140	6.3	6%	Aug 23	XStream can cause a Denial of Service Affected: All versions, or not specified
CVE-2017-10356	6.2	1%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified
CVE-2017-10293	6.1	1%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc) Affected: All versions, or not specified
CVE-2022-1434	5.9	1%	May 3	Incorrect MAC key used in the RC4-MD5 ciphersuite Affected: All versions, or not specified
CVE-2021-35550	5.9	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2019-2958	5.9	3%	Oct 16	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2018-2973	5.9	5%	Jul 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE) Affected: All versions, or not specified
CVE-2017-10135	5.9	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: All versions, or not specified
CVE-2021-3522	5.5	5%	Jun 2	GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags Affected: All versions, or not specified
CVE-2019-5507	5.5	0%	Oct 9	SnapManager for Oracle prior to version 3.4.2P1 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information Affected: before 3.4.2; 3.4.2
CVE-2022-1343	5.3	2%	May 3	OCSP_basic_verify may incorrectly verify the response signing certificate Affected: All versions, or not specified
CVE-2022-22968	5.3	6%	Apr 14	In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a… Affected: All versions, or not specified
CVE-2022-21366	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21365	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21360	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21349	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: All versions, or not specified
CVE-2022-21341	5.3	4%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified
CVE-2022-21340	5.3	8%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21305	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2022-21299	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21296	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21294	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21293	5.3	8%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21291	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2022-21283	5.3	4%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21282	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21277	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21271	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2021-35586	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2021-35578	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2021-35565	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2021-35564	5.3	6%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool) Affected: All versions, or not specified
CVE-2021-35561	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility) Affected: All versions, or not specified
CVE-2021-35559	5.3	16%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: All versions, or not specified
CVE-2021-35556	5.3	8%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: All versions, or not specified
CVE-2020-27223	5.3	78%	Feb 26	In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of… Affected: All versions, or not specified
CVE-2020-14803	5.3	3%	Oct 21	Vulnerability in the Java SE product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-14621	5.3	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2020-2830	5.3	5%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency) Affected: All versions, or not specified
CVE-2020-2781	5.3	5%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2020-1954	5.3	6%	Apr 1	Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus Affected: All versions, or not specified
CVE-2019-10247	5.3	6%	Apr 22	In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured… Affected: All versions, or not specified