Netapp Cloud Manager vulnerabilities

• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• qos logback, netapp cloud manager, service level manager +3 more +5 more RCE from attacker with configuration edit priviledges through JNDI lookup CVE-2021-42550 Fix available 6.6 MediumDecember 16, 2021
• apache log4j, log4j2, apple xcode +141 more +143 more Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints CVE-2021-44228 In KEVPublic exploitFix available EPSS 100.0% 10.0 CriticalDecember 10, 2021
• netapp cloud manager NetApp Cloud Manager versions prior to 3.9.10 are susceptible to a vulnerability which could... CVE-2021-27002 7.5 HighOctober 11, 2021
• netapp cloud manager NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory... CVE-2021-26999 4.3 MediumAugust 6, 2021
• netapp cloud manager NetApp Cloud Manager versions prior to 3.9.9 log sensitive information that is available only to... CVE-2021-26998 4.3 MediumAugust 6, 2021
• squid-cache squid, fedoraproject fedora, netapp cloud manager +2 more An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem... CVE-2021-31807 Fix available EPSS 15.6% 6.5 MediumMay 27, 2021
• squid-cache squid, debian linux, fedoraproject fedora +1 more +3 more An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug... CVE-2021-31808 Fix available 6.5 MediumMay 27, 2021
• squid-cache squid, debian linux, fedoraproject fedora +1 more +3 more An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug... CVE-2021-31806 Fix available EPSS 95.3% 6.5 MediumMay 27, 2021
• squid-cache squid, debian linux, fedoraproject fedora +1 more +3 more Moderate: squid:4 security, bug fix, and enhancement update CVE-2021-28651 Fix available 7.5 HighMay 27, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, jenkins +19 more +21 more Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources CVE-2021-28165 Public exploitFix available EPSS 53.9% 7.5 HighApril 1, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, netapp cloud manager +15 more +17 more Authorization Before Parsing and Canonicalization in jetty CVE-2021-28164 Public exploitFix available EPSS 82.4% 5.3 MediumApril 1, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, apache ignite +21 more +23 more Directory exposure in jetty CVE-2021-28163 Fix available 2.7 LowApril 1, 2021
• netapp cloud manager Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability that could allow a... CVE-2021-26990 9.1 CriticalMarch 19, 2021
• netapp cloud manager Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability which could allow a... CVE-2021-26992 7.5 HighMarch 19, 2021
• netapp cloud manager Cloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing (CORS)... CVE-2021-26991 7.5 HighMarch 19, 2021
• squid-cache squid, debian linux, fedoraproject fedora +1 more +3 more Important: squid:4 security update CVE-2020-25097 Fix available 8.6 HighMarch 19, 2021
• lodash, netapp active iq unified manager, cloud manager +20 more +22 more Command Injection CVE-2021-23337 Public exploitFix available EPSS 21.3% 7.2 HighFebruary 15, 2021
• squid-cache squid, fedoraproject fedora, netapp cloud manager +2 more Moderate: squid:4 security, bug fix, and enhancement update CVE-2020-14058 Fix available 7.5 HighJune 30, 2020
• netapp oncommand cloud manager OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by... CVE-2019-17275 9.8 CriticalFebruary 26, 2020
• oracle jrockit, apache cassandra, canonical ubuntu linux +35 more +37 more Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and... CVE-2016-3427 In KEVFix available EPSS 92.3% 9.8 CriticalApril 21, 2016