Netapp Snap Creator Framework vulnerabilities

• vmware spring framework, netapp active iq unified manager, cloud secure agent +4 more +6 more Improper handling of case sensitivity in Spring Framework CVE-2022-22968 Public exploitFix available 5.3 MediumApril 14, 2022
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +33 more +35 more Deeply nested json in jackson-databind CVE-2020-36518 Public exploitFix available 7.5 HighMarch 11, 2022
• qos logback, netapp cloud manager, service level manager +3 more +5 more RCE from attacker with configuration edit priviledges through JNDI lookup CVE-2021-42550 Fix available 6.6 MediumDecember 16, 2021
• vmware spring framework, netapp active iq unified manager, management services for element software and netapp hci +5 more +7 more Improper Output Neutralization for Logs in Spring Framework CVE-2021-22096 Fix available 4.3 MediumOctober 28, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity os controller +16 more +18 more Encoded URIs can access WEB-INF directory in Eclipse Jetty CVE-2021-34429 Public exploitFix available EPSS 99.3% 5.3 MediumJuly 15, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +14 more +16 more SessionListener can prevent a session from being invalidated breaking logout CVE-2021-34428 Public exploitFix available 2.9 LowJune 22, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2021-28169 Fix available EPSS 78.5% 5.3 MediumJune 9, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, apache nifi +14 more +16 more DOS vulnerability for Quoted Quality CSV headers CVE-2020-27223 Public exploitFix available EPSS 78.0% 5.2 MediumFebruary 26, 2021
• apache nutch, netapp snap creator framework +1 more An XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser CVE-2021-23901 Fix available 9.1 CriticalJanuary 25, 2021
• apache xmlbeans, debian linux, netapp oncommand unified manager core package +4 more +6 more XMLBeans XML Entity Expansion CVE-2021-23926 Fix available 9.1 CriticalJanuary 14, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 more Buffer not correctly recycled in Gzip Request inflation CVE-2020-27218 Fix available 4.8 MediumNovember 28, 2020
• apache cxf, netapp snap creator framework, vasa provider for clustered data ontap +3 more +5 more Apache CXF Reflected XSS in the services listing page via the styleSheetPath CVE-2020-13954 Fix available EPSS 40.9% 6.1 MediumNovember 12, 2020
• eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2020-27216 Fix available 7.0 HighOctober 23, 2020
• spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 more RFD Protection Bypass via jsessionid CVE-2020-5421 Public exploitFix available EPSS 11.6% 8.7 HighSeptember 19, 2020
• perl, fedoraproject fedora, netapp oncommand workflow automation +16 more +18 more CVE-2020-12723 does not affect BellSoft software CVE-2020-12723 Fix available 7.5 HighJune 1, 2020
• perl, fedoraproject fedora, netapp oncommand workflow automation +17 more +19 more CVE-2020-10878 does not affect BellSoft software CVE-2020-10878 Fix available 8.6 HighJune 1, 2020
• jquery, juniper junos, netapp active iq unified manager +4 more +6 more Cross-Site Scripting in jquery CVE-2020-7656 Public exploitFix available 6.1 MediumMay 19, 2020
• jquery, debian linux, drupal +49 more +51 more Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• jquery, debian linux, drupal +67 more +69 more jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 more dom4j allows External Entities by default which might enable XXE attacks CVE-2020-10683 Fix available 9.8 CriticalApril 29, 2020
• netapp snap creator framework NetApp Snap Creator Framework before 4.3P1 allows remote authenticated users to conduct... CVE-2016-5710 4.6 MediumFebruary 10, 2020
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +24 more +26 more Installation information leak in Eclipse Jetty CVE-2019-10247 Fix available 5.3 MediumApril 22, 2019
• eclipse jetty, the eclipse foundation eclipse jetty, netapp element +23 more +25 more Information Exposure vulnerability in Eclipse Jetty CVE-2019-10246 Fix available 5.3 MediumApril 22, 2019
• perl, canonical ubuntu linux, debian linux +5 more +7 more Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid... CVE-2018-18314 Fix available 9.8 CriticalNovember 29, 2018
• perl, apple mac os x, canonical ubuntu linux +6 more +8 more Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers... CVE-2018-18313 Fix available 9.1 CriticalNovember 29, 2018
• perl, canonical ubuntu linux, debian linux +5 more +7 more Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular... CVE-2018-18312 Fix available EPSS 12.8% 9.8 CriticalNovember 29, 2018
• perl, apple mac os x, canonical ubuntu linux +15 more +17 more Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular... CVE-2018-18311 Fix available EPSS 11.7% 9.8 CriticalNovember 29, 2018
• apache tomcat, canonical ubuntu linux, debian linux +12 more +14 more Apache Tomcat Open Redirect vulnerability CVE-2018-11784 Public exploitFix available EPSS 97.7% 4.3 MediumOctober 4, 2018
• dom4j project dom4j, debian linux, netapp oncommand workflow automation +11 more +13 more Dom4j contains a XML Injection vulnerability CVE-2018-1000632 Fix available 7.5 HighAugust 20, 2018
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +17 more +19 more Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling) CVE-2017-7658 Fix available EPSS 19.0% 9.8 CriticalJune 26, 2018
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +15 more +17 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2017-7657 Fix available EPSS 14.4% 9.8 CriticalJune 26, 2018
• eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity management plug-ins +10 more +12 more Access and integrity issue within Eclipse Jetty CVE-2018-12538 Fix available 8.8 HighJune 22, 2018
• perl, apple mac os x, archive\ \ +6 more +8 more In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory... CVE-2018-12015 Fix available 7.5 HighJune 7, 2018
• netapp snap creator framework Cross-site request forgery (CSRF) vulnerability in NetApp Snap Creator Framework before 4.3.0P1... CVE-2016-5372 6.3 MediumFebruary 7, 2017
• netapp snap creator framework NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed... CVE-2016-7172 7.5 HighDecember 21, 2016
• apache tomcat, canonical ubuntu linux, debian linux +16 more +18 more Apache Tomcat Improper Access Control vulnerability CVE-2016-8735 In KEVFix available EPSS 90.3% 9.8 CriticalNovember 24, 2016
• apache tomcat, canonical ubuntu linux, debian linux +11 more +13 more Incorrect Authorization in Apache Tomcat CVE-2016-6797 Fix available 7.5 HighOctober 28, 2016
• apache tomcat, canonical ubuntu linux, debian linux +12 more +14 more Apache Tomcat vulnerable to SecurityManager bypass CVE-2016-6796 Fix available 7.5 HighOctober 28, 2016
• apache tomcat, canonical ubuntu linux, debian linux +11 more +13 more System Property Disclosure in Apache Tomcat CVE-2016-6794 Fix available 5.3 MediumOctober 28, 2016
• apache tomcat, canonical ubuntu linux, debian linux +12 more +14 more Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat CVE-2016-5018 Fix available EPSS 10.3% 9.1 CriticalOctober 28, 2016
• apache tomcat, canonical ubuntu linux, debian linux +12 more +14 more Observable Discrepancy in Apache Tomcat CVE-2016-0762 Fix available 5.9 MediumOctober 28, 2016
• ietf transport layer security, netapp clustered data ontap antivirus connector, data ontap edge +10 more +12 more The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and... CVE-2015-8960 8.1 HighSeptember 21, 2016