Netapp Element Plug-in vulnerabilities

• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +5 more +7 more Jetty invalid URI parsing may produce invalid HttpURI.authority CVE-2022-2047 Fix available 2.7 LowJuly 7, 2022
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2022-2048 Fix available 7.5 HighJuly 7, 2022
• eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity os controller +16 more +18 more Encoded URIs can access WEB-INF directory in Eclipse Jetty CVE-2021-34429 Public exploitFix available EPSS 99.3% 5.3 MediumJuly 15, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +14 more +16 more SessionListener can prevent a session from being invalidated breaking logout CVE-2021-34428 Public exploitFix available 2.9 LowJune 22, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, netapp cloud manager +15 more +17 more Authorization Before Parsing and Canonicalization in jetty CVE-2021-28164 Public exploitFix available EPSS 82.4% 5.3 MediumApril 1, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, apache ignite +21 more +23 more Directory exposure in jetty CVE-2021-28163 Fix available 2.7 LowApril 1, 2021
• netapp element plug-in for vcenter server, management services for element software and netapp hci, solidfire \& hci management node +1 more +3 more Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework... CVE-2021-26987 9.8 CriticalMarch 15, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, apache nifi +14 more +16 more DOS vulnerability for Quoted Quality CSV headers CVE-2020-27223 Public exploitFix available EPSS 78.0% 5.2 MediumFebruary 26, 2021
• apache tomcat, debian linux, netapp element plug-in +9 more +11 more Apache Tomcat: Request header mix-up between HTTP/2 streams CVE-2020-17527 Public exploitFix available EPSS 24.6% 7.5 HighDecember 3, 2020
• netapp element plug-in for vcenter server, hyper converged infrastructure compute node +1 more Element Plug-in for vCenter Server versions prior to 4.2.3 may disclose sensitive account... CVE-2019-5492 7.5 HighApril 29, 2019