Vasa Provider For Clustered Data Ontap vulnerabilities

Product

Vasa Provider For Clustered Data Ontap

by Netapp · last CVE Apr 1, 2021

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities69 In the news0 Timeline

Severity mix

Critical 15High 22Medium 28Low 4

Severity

All severities69 Critical15 High22 Medium28 Low4

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Vasa Provider For Clustered Data Ontap to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-10274	6.8	3%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: 7.2 and later; 6.0
CVE-2017-10198	6.8	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.2 and later; 6.0
CVE-2017-10243	6.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS) Affected: 7.2 and later; 6.0
CVE-2017-10356	6.2	1%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.2 and later; 6.0
CVE-2020-13954	6.1	41%	Nov 12	By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses Affected: 9.6 and later
CVE-2017-10293	6.1	1%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc) Affected: 7.2 and later; 6.0
CVE-2018-2973	5.9	5%	Jul 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE) Affected: 9.7 and later
CVE-2017-10135	5.9	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 7.2 and later; 6.0
CVE-2019-3882	5.5	1%	Apr 24	A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit Affected: 7.2 and later
CVE-2021-28164	5.3	82%	Apr 1	In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources… Affected: 9.6 and later
CVE-2019-10247	5.3	6%	Apr 22	In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured… Affected: 9.6 and later
CVE-2019-10246	5.3	4%	Apr 22	In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a… Affected: 9.6 and later
CVE-2017-15906	5.3	3%	Oct 26	The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files Affected: 6.0 through 6.2; 9.7 and later
CVE-2017-10357	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization) Affected: 7.2 and later; 6.0
CVE-2017-10355	5.3	16%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 7.2 and later; 6.0
CVE-2017-10350	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS) Affected: 7.2 and later; 6.0
CVE-2017-10349	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 7.2 and later; 6.0
CVE-2017-10348	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.2 and later; 6.0
CVE-2017-10347	5.3	3%	Oct 19	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 7.2 and later; 6.0
CVE-2017-10281	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 7.2 and later; 6.0
CVE-2017-10109	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 7.2 and later; 6.0
CVE-2017-10108	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 7.2 and later; 6.0
CVE-2019-3901	4.7	0%	Apr 22	A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs Affected: 7.2 and later
CVE-2018-2581	4.7	3%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 7.2 and later; 6.0
CVE-2018-2940	4.3	3%	Jul 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 9.7 and later
CVE-2017-10105	4.3	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 7.2 and later; 6.0
CVE-2017-10081	4.3	2%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 7.2 and later; 6.0
CVE-2017-10295	4.0	2%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 7.2 and later; 6.0