Virtual Storage Console vulnerabilities | LiveThreat CVE Feed

Product

Virtual Storage Console

by Netapp · last CVE Apr 1, 2021

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities70 In the news0 Timeline

Severity mix

Critical 16High 23Medium 27Low 4

Severity

All severities70 Critical16 High23 Medium27 Low4

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Virtual Storage Console to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-3427 In wildKEV	9.8	92%	Apr 21	Oracle Java SE and JRockit Unspecified Vulnerability Affected: 7.2 and later
CVE-2018-6485	9.8	5%	Feb 1	An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to… Affected: 7.2 and later
CVE-2016-9841	9.8	8%	May 23	inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: All versions, or not specified
CVE-2017-10346	9.6	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 7.2 and later; 6.0
CVE-2017-10285	9.6	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 7.2 and later; 6.0
CVE-2017-10111	9.6	2%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.2 and later; 6.0
CVE-2017-10110	9.6	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) Affected: 7.2 and later; 6.0
CVE-2017-10107	9.6	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 7.2 and later; 6.0
CVE-2017-10101	9.6	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 7.2 and later; 6.0
CVE-2017-10096	9.6	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 7.2 and later; 6.0
CVE-2017-10090	9.6	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.2 and later; 6.0
CVE-2017-10089	9.6	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO) Affected: 7.2 and later; 6.0
CVE-2017-10087	9.6	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.2 and later; 6.0
CVE-2017-10086	9.6	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 7.2 and later; 6.0
CVE-2018-2938	9.0	2%	Jul 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB) Affected: 9.7 and later
CVE-2017-10102	9.0	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 7.2 and later; 6.0
CVE-2018-2964	8.3	3%	Jul 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 9.7 and later
CVE-2018-2942	8.3	2%	Jul 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL) Affected: 9.7 and later
CVE-2018-2941	8.3	3%	Jul 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 9.7 and later
CVE-2018-2826	8.3	5%	Apr 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: 7.2 and later
CVE-2018-2825	8.3	4%	Apr 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: 7.2 and later
CVE-2018-2638	8.3	3%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 7.2 and later; 6.0
CVE-2017-10116	8.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.2 and later; 6.0
CVE-2017-10114	8.3	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 7.2 and later; 6.0
CVE-2017-10074	8.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 7.2 and later; 6.0; 6.2.2
CVE-2019-11815	8.1	4%	May 8	An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8 Affected: 7.2 and later
CVE-2018-20836	8.1	5%	May 7	An issue was discovered in the Linux kernel before 4.20 Affected: 7.2 and later
CVE-2017-10078	8.1	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting) Affected: 7.2 and later; 6.0; 6.2.2
CVE-2020-11868	7.5	2%	Apr 17	ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP… Affected: 7.2 and later
CVE-2018-2627	7.5	0%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer) Affected: 7.2 and later; 6.0
CVE-2017-10388	7.5	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.2 and later; 6.0
CVE-2017-10176	7.5	5%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.2 and later; 6.0
CVE-2017-10118	7.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 7.2 and later; 6.0
CVE-2017-10115	7.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 7.2 and later; 6.0
CVE-2017-10067	7.5	3%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security) Affected: 7.2 and later; 6.0; 6.2.2
CVE-2017-10309	7.1	9%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 7.2 and later; 6.0
CVE-2017-10125	7.1	1%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 7.2 and later; 6.0
CVE-2020-27216	7.0	4%	Oct 23	In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory… Affected: 7.2 and later
CVE-2019-11486	7.0	0%	Apr 23	The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions Affected: 9.7
CVE-2017-10274	6.8	3%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: 7.2 and later; 6.0
CVE-2017-10198	6.8	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.2 and later; 6.0
CVE-2017-10243	6.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS) Affected: 7.2 and later; 6.0
CVE-2017-10356	6.2	1%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.2 and later; 6.0
CVE-2017-10293	6.1	1%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc) Affected: 7.2 and later; 6.0
CVE-2018-2973	5.9	5%	Jul 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE) Affected: 9.7 and later
CVE-2017-10135	5.9	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 7.2 and later; 6.0
CVE-2021-28164	5.3	82%	Apr 1	In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources… Affected: 9.6 and later
CVE-2019-10247	5.3	6%	Apr 22	In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured… Affected: 9.6 and later
CVE-2019-10246	5.3	4%	Apr 22	In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a… Affected: 9.6 and later; 9.6
CVE-2018-15473	5.3	99%	Aug 17	OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has… Affected: 7.2 and later