Netapp Service Level Manager vulnerabilities

• qos logback, netapp cloud manager, service level manager +3 more +5 more RCE from attacker with configuration edit priviledges through JNDI lookup CVE-2021-42550 Fix available 6.6 MediumDecember 16, 2021
• fasterxml jackson-databind, apache nifi, debian linux +6 more +8 more Deserialization of untrusted data in jackson-databind CVE-2021-20190 Fix available 8.1 HighJanuary 19, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 more Unsafe Deserialization in jackson-databind CVE-2020-36179 Public exploitFix available EPSS 17.1% 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36180 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36182 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36183 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36184 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36185 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36186 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36187 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36188 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 more Unsafe Deserialization in jackson-databind CVE-2020-36189 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 more Unsafe Deserialization in jackson-databind CVE-2020-36181 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +37 more +39 more Serialization gadget exploit in jackson-databind CVE-2020-35728 Public exploitFix available EPSS 12.5% 8.1 HighDecember 27, 2020
• fasterxml jackson-databind, debian linux, netapp service level manager +22 more +24 more Serialization gadgets exploit in jackson-databind CVE-2020-35490 Fix available 8.1 HighDecember 17, 2020
• fasterxml jackson-databind, debian linux, netapp service level manager +23 more +25 more Serialization gadgets exploit in jackson-databind CVE-2020-35491 Fix available 8.1 HighDecember 17, 2020
• redhat wildfly, netapp active iq unified manager, oncommand insight +8 more +10 more Uncontrolled Resource Consumption in WildFly CVE-2020-25689 Fix available 5.3 MediumOctober 30, 2020
• apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 more XML External Entity (XXE) Injection in Jackson Databind CVE-2020-25649 Fix available EPSS 17.7% 7.5 HighOctober 14, 2020
• redhat wildfly openssl, netapp oncommand insight, oncommand workflow automation +7 more +9 more Wildfly-OpenSSL memory leak flaw CVE-2020-25644 Fix available 7.5 HighOctober 6, 2020
• fasterxml jackson-databind, debian linux, huawei oceanstor 9000 firmware +5 more +7 more Deserialization of Untrusted Data in jackson-databind CVE-2020-8840 Public exploitFix available EPSS 26.6% 9.8 CriticalFebruary 10, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +27 more +29 more Deserialization of Untrusted Data in jackson-databind CVE-2019-20330 Fix available 9.8 CriticalJanuary 3, 2020
• apache tomee, bouncycastle bc-java, netapp active iq unified manager +18 more +20 more Out-of-Memory Error in Bouncy Castle Crypto CVE-2019-17359 Fix available 7.5 HighOctober 8, 2019
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +9 more +11 more Improper Input Validation in jackson-databind CVE-2019-17267 Fix available 9.8 CriticalOctober 6, 2019
• fasterxml jackson-databind, debian linux, fedoraproject fedora +23 more +25 more jackson-databind polymorphic typing issue CVE-2019-16943 Fix available 9.8 CriticalOctober 1, 2019
• fasterxml jackson-databind, debian linux, fedoraproject fedora +25 more +27 more Polymorphic Typing in FasterXML jackson-databind CVE-2019-16942 Fix available 9.8 CriticalOctober 1, 2019
• fasterxml jackson-databind, apple xcode, debian linux +21 more +23 more Deserialization of untrusted data in FasterXML jackson-databind CVE-2019-14379 Fix available 9.8 CriticalJuly 29, 2019
• lodash, f5 big-ip access policy manager, big-ip advanced firewall manager +18 more +20 more Prototype Pollution in lodash CVE-2019-10744 Public exploitFix available 9.1 CriticalJuly 10, 2019
• netapp oncommand api services, service level manager, oncommand api services and netapp service level manager +2 more All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1... CVE-2017-15518 7.8 HighFebruary 23, 2018
• apache log4j, netapp oncommand api services, oncommand insight +76 more +78 more Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017