Virtual Storage Console vulnerabilities | LiveThreat CVE Feed

Product

Virtual Storage Console

by Netapp · last CVE Apr 1, 2021

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities70 In the news0 Timeline

Severity mix

Critical 16High 23Medium 27Low 4

Severity

All severities70 Critical16 High23 Medium27 Low4

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Virtual Storage Console to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-10274	6.8	3%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: 7.2 and later; 6.0
CVE-2017-10198	6.8	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.2 and later; 6.0
CVE-2017-10243	6.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS) Affected: 7.2 and later; 6.0
CVE-2017-10356	6.2	1%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.2 and later; 6.0
CVE-2017-10293	6.1	1%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc) Affected: 7.2 and later; 6.0
CVE-2018-2973	5.9	5%	Jul 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE) Affected: 9.7 and later
CVE-2017-10135	5.9	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 7.2 and later; 6.0
CVE-2021-28164	5.3	82%	Apr 1	In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources… Affected: 9.6 and later
CVE-2019-10247	5.3	6%	Apr 22	In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured… Affected: 9.6 and later
CVE-2019-10246	5.3	4%	Apr 22	In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a… Affected: 9.6 and later; 9.6
CVE-2018-15473	5.3	99%	Aug 17	OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has… Affected: 7.2 and later
CVE-2017-15906	5.3	3%	Oct 26	The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files Affected: 9.7 and later; 9.6
CVE-2017-10357	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization) Affected: 7.2 and later; 6.0
CVE-2017-10355	5.3	16%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 7.2 and later; 6.0
CVE-2017-10350	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS) Affected: 7.2 and later; 6.0
CVE-2017-10349	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 7.2 and later; 6.0
CVE-2017-10348	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.2 and later; 6.0
CVE-2017-10347	5.3	3%	Oct 19	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 7.2 and later; 6.0
CVE-2017-10281	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 7.2 and later; 6.0
CVE-2017-10109	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 7.2 and later; 6.0
CVE-2017-10108	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 7.2 and later; 6.0
CVE-2017-10053	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D) Affected: 7.2 and later; 6.0; 6.2.2
CVE-2018-2581	4.7	3%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 7.2 and later; 6.0
CVE-2018-2940	4.3	3%	Jul 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 9.7 and later
CVE-2017-10105	4.3	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 7.2 and later; 6.0
CVE-2017-10081	4.3	2%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 7.2 and later; 6.0; 6.2.2
CVE-2017-10295	4.0	2%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 7.2 and later; 6.0