Netapp Oncommand Api Services vulnerabilities

• netty, debian linux, netapp oncommand api services +15 more +17 more Possible request smuggling in HTTP/2 due missing validation of content-length CVE-2021-21409 Fix available 5.9 MediumMarch 30, 2021
• netty io.netty:netty-codec-http2, netty, apache kudu +6 more +8 more Possible request smuggling in HTTP/2 due missing validation CVE-2021-21295 Fix available EPSS 18.9% 5.9 MediumMarch 9, 2021
• fasterxml jackson-databind, apache nifi, debian linux +6 more +8 more Deserialization of untrusted data in jackson-databind CVE-2021-20190 Fix available 8.1 HighJanuary 19, 2021
• apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 more XML External Entity (XXE) Injection in Jackson Databind CVE-2020-25649 Fix available EPSS 17.7% 7.5 HighOctober 14, 2020
• dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 more dom4j allows External Entities by default which might enable XXE attacks CVE-2020-10683 Fix available 9.8 CriticalApril 29, 2020
• netty, debian linux, fedoraproject fedora +10 more +12 more Denial of Service in Netty CVE-2020-11612 Fix available 7.5 HighApril 7, 2020
• fasterxml jackson-databind, netapp oncommand api services, steelstore cloud integrated storage +1 more +3 more Polymorphic deserialization of malicious object in jackson-databind CVE-2019-14893 Fix available 7.5 HighMarch 2, 2020
• fasterxml jackson-databind, debian linux, huawei oceanstor 9000 firmware +5 more +7 more Deserialization of Untrusted Data in jackson-databind CVE-2020-8840 Public exploitFix available EPSS 26.6% 9.8 CriticalFebruary 10, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +27 more +29 more Deserialization of Untrusted Data in jackson-databind CVE-2019-20330 Fix available 9.8 CriticalJanuary 3, 2020
• apache tomee, bouncycastle bc-java, netapp active iq unified manager +18 more +20 more Out-of-Memory Error in Bouncy Castle Crypto CVE-2019-17359 Fix available 7.5 HighOctober 8, 2019
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +9 more +11 more Improper Input Validation in jackson-databind CVE-2019-17267 Fix available 9.8 CriticalOctober 6, 2019
• fasterxml jackson-databind, debian linux, fedoraproject fedora +23 more +25 more jackson-databind polymorphic typing issue CVE-2019-16943 Fix available 9.8 CriticalOctober 1, 2019
• fasterxml jackson-databind, debian linux, fedoraproject fedora +25 more +27 more Polymorphic Typing in FasterXML jackson-databind CVE-2019-16942 Fix available 9.8 CriticalOctober 1, 2019
• fasterxml jackson-databind, debian linux, fedoraproject fedora +14 more +16 more Polymorphic Typing issue in FasterXML jackson-databind CVE-2019-16335 Fix available 9.8 CriticalSeptember 15, 2019
• fasterxml jackson-databind, debian linux, fedoraproject fedora +16 more +18 more Polymorphic Typing issue in FasterXML jackson-databind CVE-2019-14540 Public exploitFix available EPSS 10.8% 9.8 CriticalSeptember 15, 2019
• libpng, netapp active iq unified manager, oncommand api services +2 more +4 more Out-of-bounds write in libpng CVE-2018-14550 Fix available 8.8 HighJuly 10, 2019
• netapp oncommand api services, service level manager, oncommand api services and netapp service level manager +2 more All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1... CVE-2017-15518 7.8 HighFebruary 23, 2018
• netapp oncommand api services NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to... CVE-2017-8919 6.5 MediumJuly 25, 2017
• apache log4j, netapp oncommand api services, oncommand insight +76 more +78 more Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017