Snapmanager vulnerabilities | LiveThreat CVE Feed

Product

Snapmanager

by Netapp · last CVE Nov 23, 2022

On CISA KEVExploited in the wild

180

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities180 In the news0 Timeline

Severity mix

Critical 20High 50Medium 75Low 35

Severity

All severities180 Critical20 High50 Medium75 Low35

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Snapmanager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-39144 In wildKEV	8.5	98%	Aug 23	XStream is vulnerable to a Remote Command Execution attack Affected: All versions, or not specified
CVE-2022-23302	8.8	64%	Jan 18	JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration… Affected: All versions, or not specified
CVE-2021-39139	8.8	5%	Aug 23	XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified
CVE-2021-29505	8.8	77%	May 28	XStream is vulnerable to a Remote Command Execution attack Affected: All versions, or not specified
CVE-2020-26217	8.8	83%	Nov 16	Remote Code Execution in XStream Affected: All versions, or not specified
CVE-2018-12538	8.8	3%	Jun 22	In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a… Affected: All versions, or not specified
CVE-2021-3517	8.6	17%	May 19	There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11 Affected: All versions, or not specified
CVE-2021-39150	8.5	3%	Aug 23	A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling Affected: All versions, or not specified
CVE-2021-39152	8.5	11%	Aug 23	A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling Affected: All versions, or not specified
CVE-2021-39149	8.5	5%	Aug 23	XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified
CVE-2021-39148	8.5	5%	Aug 23	XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified
CVE-2021-39147	8.5	5%	Aug 23	XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified
CVE-2021-39146	8.5	14%	Aug 23	XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified
CVE-2021-39145	8.5	4%	Aug 23	XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified
CVE-2021-39141	8.5	16%	Aug 23	XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified
CVE-2021-39153	8.5	4%	Aug 23	XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified
CVE-2021-39151	8.5	5%	Aug 23	XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified
CVE-2021-39154	8.5	5%	Aug 23	XStream is vulnerable to an Arbitrary Code Execution attack Affected: All versions, or not specified
CVE-2020-14664	8.3	4%	Jul 15	Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX) Affected: All versions, or not specified
CVE-2020-14583	8.3	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-2805	8.3	4%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-2803	8.3	6%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2018-2964	8.3	3%	Jul 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified
CVE-2018-2942	8.3	2%	Jul 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL) Affected: All versions, or not specified
CVE-2018-2941	8.3	3%	Jul 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: All versions, or not specified
CVE-2018-2826	8.3	5%	Apr 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified
CVE-2018-2825	8.3	4%	Apr 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified
CVE-2018-2638	8.3	3%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified
CVE-2017-10116	8.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified
CVE-2017-10114	8.3	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: All versions, or not specified
CVE-2017-10074	8.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: All versions, or not specified
CVE-2017-10078	8.1	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting) Affected: All versions, or not specified
CVE-2015-8960	8.1	2%	Sep 21	The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the… Affected: All versions, or not specified
CVE-2022-40304	7.8	6%	Nov 23	An issue was discovered in libxml2 before 2.10.3 Affected: All versions, or not specified
CVE-2022-40303	7.5	41%	Nov 22	An issue was discovered in libxml2 before 2.10.3 Affected: All versions, or not specified
CVE-2022-1473	7.5	5%	May 3	Resource leakage when decoding certificates and keys Affected: All versions, or not specified
CVE-2022-23308	7.5	5%	Feb 26	valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes Affected: All versions, or not specified
CVE-2020-2816	7.5	3%	Apr 15	Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2018-1000632	7.5	7%	Aug 20	dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element Affected: All versions, or not specified
CVE-2018-2627	7.5	0%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer) Affected: All versions, or not specified
CVE-2017-10388	7.5	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified
CVE-2017-10176	7.5	5%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified
CVE-2017-10118	7.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: All versions, or not specified
CVE-2017-10115	7.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: All versions, or not specified
CVE-2017-10067	7.5	3%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified
CVE-2020-14593	7.4	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: All versions, or not specified
CVE-2022-2068	7.3	96%	Jun 21	The c_rehash script allows command injection Affected: All versions, or not specified
CVE-2022-1292	7.3	83%	May 3	The c_rehash script allows command injection Affected: All versions, or not specified
CVE-2017-10309	7.1	9%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified
CVE-2017-10125	7.1	1%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified