Snapmanager vulnerabilities | LiveThreat CVE Feed

Product

Snapmanager

by Netapp · last CVE Nov 23, 2022

On CISA KEVExploited in the wild

180

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities180 In the news0 Timeline

Severity mix

Critical 20High 50Medium 75Low 35

Severity

All severities180 Critical20 High50 Medium75 Low35

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Snapmanager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-10074	8.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: All versions, or not specified
CVE-2017-10078	8.1	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting) Affected: All versions, or not specified
CVE-2015-8960	8.1	2%	Sep 21	The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the… Affected: All versions, or not specified
CVE-2022-40304	7.8	6%	Nov 23	An issue was discovered in libxml2 before 2.10.3 Affected: All versions, or not specified
CVE-2022-40303	7.5	41%	Nov 22	An issue was discovered in libxml2 before 2.10.3 Affected: All versions, or not specified
CVE-2022-1473	7.5	5%	May 3	Resource leakage when decoding certificates and keys Affected: All versions, or not specified
CVE-2022-23308	7.5	5%	Feb 26	valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes Affected: All versions, or not specified
CVE-2020-2816	7.5	3%	Apr 15	Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2018-1000632	7.5	7%	Aug 20	dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element Affected: All versions, or not specified
CVE-2018-2627	7.5	0%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer) Affected: All versions, or not specified
CVE-2017-10388	7.5	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified
CVE-2017-10176	7.5	5%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified
CVE-2017-10118	7.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: All versions, or not specified
CVE-2017-10115	7.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: All versions, or not specified
CVE-2017-10067	7.5	3%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified
CVE-2020-14593	7.4	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: All versions, or not specified
CVE-2022-2068	7.3	96%	Jun 21	The c_rehash script allows command injection Affected: All versions, or not specified
CVE-2022-1292	7.3	83%	May 3	The c_rehash script allows command injection Affected: All versions, or not specified
CVE-2017-10309	7.1	9%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified
CVE-2017-10125	7.1	1%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified
CVE-2021-35567	6.8	3%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2019-2989	6.8	3%	Oct 16	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: All versions, or not specified
CVE-2019-2949	6.8	4%	Oct 16	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos) Affected: All versions, or not specified
CVE-2017-10274	6.8	3%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: All versions, or not specified
CVE-2017-10198	6.8	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified
CVE-2022-29824	6.5	4%	May 3	In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf) and tree.c (xmlBuffer) don't check for integer overflows Affected: All versions, or not specified
CVE-2018-11212	6.5	5%	May 16	An issue was discovered in libjpeg 9a and 9d Affected: All versions, or not specified
CVE-2017-10243	6.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS) Affected: All versions, or not specified
CVE-2021-39140	6.3	6%	Aug 23	XStream can cause a Denial of Service Affected: All versions, or not specified
CVE-2017-10356	6.2	1%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified
CVE-2017-10293	6.1	1%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc) Affected: All versions, or not specified
CVE-2022-1434	5.9	1%	May 3	Incorrect MAC key used in the RC4-MD5 ciphersuite Affected: All versions, or not specified
CVE-2021-35550	5.9	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2019-2958	5.9	3%	Oct 16	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2018-2973	5.9	5%	Jul 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE) Affected: All versions, or not specified
CVE-2017-10135	5.9	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: All versions, or not specified
CVE-2021-3522	5.5	5%	Jun 2	GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags Affected: All versions, or not specified
CVE-2019-5507	5.5	0%	Oct 9	SnapManager for Oracle prior to version 3.4.2P1 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information Affected: before 3.4.2; 3.4.2
CVE-2022-1343	5.3	2%	May 3	OCSP_basic_verify may incorrectly verify the response signing certificate Affected: All versions, or not specified
CVE-2022-22968	5.3	6%	Apr 14	In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a… Affected: All versions, or not specified
CVE-2022-21366	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21365	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21360	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21349	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: All versions, or not specified
CVE-2022-21341	5.3	4%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified
CVE-2022-21340	5.3	8%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21305	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2022-21299	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21296	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2022-21294	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified