Vasa Provider For Clustered Data Ontap vulnerabilities

Product

Vasa Provider For Clustered Data Ontap

by Netapp · last CVE Apr 1, 2021

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities69 In the news0 Timeline

Severity mix

Critical 15High 22Medium 28Low 4

Severity

All severities69 Critical15 High22 Medium28 Low4

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Vasa Provider For Clustered Data Ontap to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-3427 In wildKEV	9.8	92%	Apr 21	Oracle Java SE and JRockit Unspecified Vulnerability Affected: 7.2 and later
CVE-2016-9841	9.8	8%	May 23	inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: 7.2 and later
CVE-2017-10346	9.6	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 7.2 and later; 6.0
CVE-2017-10285	9.6	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 7.2 and later; 6.0.
CVE-2017-10111	9.6	2%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.2 and later; 6.0
CVE-2017-10110	9.6	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) Affected: 7.2 and later; 6.0
CVE-2017-10107	9.6	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 7.2 and later; 6.0
CVE-2017-10101	9.6	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 7.2 and later; 6.0
CVE-2017-10096	9.6	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 7.2 and later; 6.0
CVE-2017-10090	9.6	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.2 and later; 6.0
CVE-2017-10089	9.6	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO) Affected: 7.2 and later; 6.0
CVE-2017-10087	9.6	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.2 and later; 6.0
CVE-2017-10086	9.6	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 7.2 and later; 6.0
CVE-2018-2938	9.0	2%	Jul 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB) Affected: 9.7 and later
CVE-2017-10102	9.0	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 7.2 and later; 6.0
CVE-2018-2964	8.3	3%	Jul 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 9.7 and later; 9.6
CVE-2018-2942	8.3	2%	Jul 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL) Affected: 9.7 and later
CVE-2018-2941	8.3	3%	Jul 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 9.7 and later
CVE-2018-2638	8.3	3%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 7.2 and later; 6.0
CVE-2017-10116	8.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.2 and later; 6.0
CVE-2017-10114	8.3	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 7.2 and later; 6.0
CVE-2017-10074	8.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 7.2 and later; 6.0
CVE-2019-11815	8.1	4%	May 8	An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8 Affected: 7.2 and later
CVE-2018-20836	8.1	5%	May 7	An issue was discovered in the Linux kernel before 4.20 Affected: 7.2 and later
CVE-2017-10078	8.1	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting) Affected: 7.2 and later; 6.0
CVE-2019-3900	7.7	4%	Apr 25	An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx() Affected: 7.2 and later
CVE-2021-28165	7.5	54%	Apr 1	In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame Affected: before 9.10
CVE-2020-11868	7.5	2%	Apr 17	ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP… Affected: 7.2 and later; 7.2 and later
CVE-2018-2627	7.5	0%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer) Affected: 7.2 and later; 6.0
CVE-2017-10388	7.5	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.2 and later; 6.0
CVE-2017-10176	7.5	5%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.2 and later; 6.0
CVE-2017-10118	7.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 7.2 and later; 6.0
CVE-2017-10115	7.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 7.2 and later; 6.0
CVE-2017-10067	7.5	3%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security) Affected: 7.2 and later; 6.0
CVE-2017-10309	7.1	9%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 7.2 and later; 6.0
CVE-2017-10125	7.1	1%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 7.2 and later; 6.0
CVE-2019-11486	7.0	0%	Apr 23	The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions Affected: 9.7
CVE-2017-10274	6.8	3%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: 7.2 and later; 6.0
CVE-2017-10198	6.8	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.2 and later; 6.0
CVE-2017-10243	6.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS) Affected: 7.2 and later; 6.0
CVE-2017-10356	6.2	1%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.2 and later; 6.0
CVE-2020-13954	6.1	41%	Nov 12	By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses Affected: 9.6 and later
CVE-2017-10293	6.1	1%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc) Affected: 7.2 and later; 6.0
CVE-2018-2973	5.9	5%	Jul 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE) Affected: 9.7 and later
CVE-2017-10135	5.9	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 7.2 and later; 6.0
CVE-2019-3882	5.5	1%	Apr 24	A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit Affected: 7.2 and later
CVE-2021-28164	5.3	82%	Apr 1	In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources… Affected: 9.6 and later
CVE-2019-10247	5.3	6%	Apr 22	In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured… Affected: 9.6 and later
CVE-2019-10246	5.3	4%	Apr 22	In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a… Affected: 9.6 and later
CVE-2017-15906	5.3	3%	Oct 26	The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files Affected: 6.0 through 6.2; 9.7 and later