E Series Santricity Management Plug Ins

27 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-14782 LOW Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Java Oracle Authentication Bypass Openjdk Jdk +14

NVD

CVSS 3.1

3.7

EPSS

2.2%

CVE-2020-2659 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +21

NVD

CVSS 3.1

3.7

EPSS

4.2%

CVE-2020-2654 LOW PATCH Monitor

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +21

NVD

CVSS 3.1

3.7

EPSS

3.8%

CVE-2020-2604 HIGH PATCH This Week

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

Oracle Java Deserialization Commerce Experience Manager Commerce Guided Search +25

NVD

CVSS 3.1

8.1

EPSS

4.9%

CVE-2020-2585 MEDIUM PATCH This Month

Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Java Oracle Authentication Bypass Jdk Jre +12

NVD

CVSS 3.1

5.9

EPSS

3.3%

CVE-2019-13118 Ruby MEDIUM PATCH This Month

In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal,. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Access of Resource Using Incompatible Type (Type Confusion) vulnerability could allow attackers to execute arbitrary code by exploiting type confusion in the application.

Information Disclosure Memory Corruption Libxslt Leap Active Iq Unified Manager +22

NVD VulDB

CVSS 3.1

5.3

EPSS

1.0%

CVE-2019-11068 Ruby CRITICAL PATCH GHSA Act Now

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Libxslt Ubuntu Linux Debian Linux Fedora +18

NVD VulDB

CVSS 3.1

9.8

EPSS

1.1%

CVE-2018-12538 Maven HIGH PATCH This Week

In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Jetty E Series Santricity Management Plug Ins E Series Santricity Os Controller E Series Santricity Web Services Proxy +8

NVD

CVSS 3.0

8.8

EPSS

2.7%

CVE-2018-2638 HIGH PATCH This Week

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required.

Java Oracle Information Disclosure Jdk Jre +22

NVD

CVSS 3.1

8.3

EPSS

3.3%

CVE-2018-2627 HIGH PATCH This Week

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Rated high severity (CVSS 7.5).

Java Oracle Microsoft Information Disclosure Jdk +19

NVD

CVSS 3.1

7.5

EPSS

0.5%

CVE-2018-2581 MEDIUM PATCH This Month

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Java Oracle Authentication Bypass Jdk Jre +18

NVD

CVSS 3.1

4.7

EPSS

2.5%

CVE-2017-10388 HIGH PATCH This Week

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Java Oracle Jdk Jre +27

NVD

CVSS 3.1

7.5

EPSS

0.5%

CVE-2017-10357 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Java Oracle Jdk Jre +27

NVD

CVSS 3.1

5.3

EPSS

0.7%

CVE-2017-10356 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Java Oracle Jdk Jre +27

NVD

CVSS 3.1

6.2

EPSS

0.7%

CVE-2017-10355 MEDIUM POC PATCH This Month

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Java Oracle Jdk Jre +28

NVD Exploit-DB

CVSS 3.1

5.3

EPSS

6.3%

CVE-2017-10350 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Java Oracle Jdk Jre +27

NVD

CVSS 3.1

5.3

EPSS

0.7%

CVE-2017-10349 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Java Oracle Jdk Jre +27

NVD

CVSS 3.1

5.3

EPSS

0.7%

CVE-2017-10348 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Java Oracle Jdk Jre +27

NVD

CVSS 3.1

5.3

EPSS

0.7%

CVE-2017-10347 MEDIUM PATCH This Month

Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Java Oracle Jdk Jre +27

NVD

CVSS 3.1

5.3

EPSS

0.7%

CVE-2017-10346 CRITICAL PATCH Act Now

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Java Oracle Jdk Jre +27

NVD

CVSS 3.1

9.6

EPSS

0.6%

CVE-2017-10345 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable, no authentication required.

Denial Of Service Java Oracle Jdk Jre +28

NVD

CVSS 3.1

3.1

EPSS

0.8%

CVE-2017-10309 HIGH POC PATCH This Week

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Java Oracle Jdk Jre +24

NVD Exploit-DB

CVSS 3.1

7.1

EPSS

1.8%

CVE-2017-10295 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Jdk Jre +28

NVD

CVSS 3.1

4.0

EPSS

0.4%

CVE-2017-10293 MEDIUM PATCH This Month

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Java Oracle Jdk Jre +19

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2017-10285 CRITICAL PATCH Act Now

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Java Oracle Jdk Jre +27

NVD

CVSS 3.1

9.6

EPSS

0.6%

CVE-2017-10281 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Java Oracle Jdk Jre +28

NVD

CVSS 3.1

5.3

EPSS

0.7%

CVE-2017-10274 MEDIUM PATCH This Month

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Jdk Jre +26

NVD

CVSS 3.1

6.8

EPSS

0.6%

CVE-2020-14782

EPSS 2% CVSS 3.7

LOW Monitor

Java Oracle Authentication Bypass +16

NVD

CVE-2020-2659

EPSS 4% CVSS 3.7

LOW PATCH Monitor

Java Denial Of Service Oracle +23

NVD

CVE-2020-2654

EPSS 4% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +23

NVD

CVE-2020-2604

EPSS 5% CVSS 8.1

HIGH PATCH This Week

Oracle Java Deserialization +27

NVD

CVE-2020-2585

EPSS 3% CVSS 5.9

MEDIUM PATCH This Month

Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Java Oracle Authentication Bypass +14

NVD

CVE-2019-13118 Ruby

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

Information Disclosure Memory Corruption Libxslt +24

NVD VulDB

CVE-2019-11068 Ruby

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

Authentication Bypass Libxslt Ubuntu Linux +20

NVD VulDB

CVE-2018-12538 Maven

EPSS 3% CVSS 8.8

HIGH PATCH This Week

Information Disclosure Jetty E Series Santricity Management Plug Ins +10

NVD

CVE-2018-2638

EPSS 3% CVSS 8.3

HIGH PATCH This Week

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required.

Java Oracle Information Disclosure +24

NVD

CVE-2018-2627

EPSS 0% CVSS 7.5

HIGH PATCH This Week

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Rated high severity (CVSS 7.5).

Java Oracle Microsoft +21

NVD

CVE-2018-2581

EPSS 3% CVSS 4.7

MEDIUM PATCH This Month

Java Oracle Authentication Bypass +20

NVD

CVE-2017-10388

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Information Disclosure Java Oracle +29

NVD

CVE-2017-10357

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

Denial Of Service Java Oracle +29

NVD

CVE-2017-10356

EPSS 1% CVSS 6.2

MEDIUM PATCH This Month

Authentication Bypass Java Oracle +29

NVD

CVE-2017-10355

EPSS 6% CVSS 5.3

MEDIUM POC PATCH This Month

Denial Of Service Java Oracle +30

NVD Exploit-DB

CVE-2017-10350

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

Denial Of Service Java Oracle +29

NVD

CVE-2017-10349

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

Denial Of Service Java Oracle +29

NVD

CVE-2017-10348

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

Denial Of Service Java Oracle +29

NVD

CVE-2017-10347

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

Denial Of Service Java Oracle +29

NVD

CVE-2017-10346

EPSS 1% CVSS 9.6

CRITICAL PATCH Act Now

Information Disclosure Java Oracle +29

NVD

CVE-2017-10345

EPSS 1% CVSS 3.1

LOW PATCH Monitor

Denial Of Service Java Oracle +30

NVD

CVE-2017-10309

EPSS 2% CVSS 7.1

HIGH POC PATCH This Week

Denial Of Service Java Oracle +26

NVD Exploit-DB

CVE-2017-10295

EPSS 0% CVSS 4.0

MEDIUM PATCH This Month

Authentication Bypass Java Oracle +30

NVD

CVE-2017-10293

EPSS 0% CVSS 6.1

MEDIUM PATCH This Month

Authentication Bypass Java Oracle +21

NVD

CVE-2017-10285

EPSS 1% CVSS 9.6

CRITICAL PATCH Act Now

Information Disclosure Java Oracle +29

NVD

CVE-2017-10281

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

Denial Of Service Java Oracle +30

NVD

CVE-2017-10274

EPSS 1% CVSS 6.8

MEDIUM PATCH This Month

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle +28

NVD