E Series Santricity Unified Manager

30 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-47554 Maven MEDIUM PATCH This Month

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Apache Denial Of Service Commons Io Active Iq Unified Manager Bluexp +5

NVD

CVSS 3.1

4.3

EPSS

1.2%

CVE-2023-46604 Maven CRITICAL POC KEV EUVD KEV PATCH THREAT Act Now

The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Java Deserialization Activemq Activemq Legacy Openwire Module Debian Linux +3

NVD

CVSS 3.1

9.8

EPSS

99.7%

CVE-2023-26049 Maven MEDIUM PATCH This Month

Jetty is a java based web server and servlet engine. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Java Information Disclosure Jetty Debian Linux Active Iq Unified Manager +3

NVD GitHub

CVSS 3.1

5.3

EPSS

1.3%

CVE-2022-39399 LOW PATCH Monitor

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Oracle Java Graalvm Jdk +13

NVD VulDB

CVSS 3.1

3.7

EPSS

0.3%

CVE-2022-21628 MEDIUM PATCH This Month

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Oracle Denial Of Service Java Graalvm Jdk +13

NVD

CVSS 3.1

5.3

EPSS

2.0%

CVE-2022-21626 MEDIUM PATCH This Month

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Oracle Denial Of Service Java Graalvm Jdk +13

NVD VulDB

CVSS 3.1

5.3

EPSS

0.1%

CVE-2022-21624 LOW PATCH Monitor

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

Deserialization Oracle Java Graalvm Jdk +13

NVD VulDB

CVSS 3.1

3.7

EPSS

0.2%

CVE-2022-21619 LOW PATCH Monitor

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Oracle Java Graalvm Jdk +13

NVD VulDB

CVSS 3.1

3.7

EPSS

0.3%

CVE-2022-21618 MEDIUM PATCH This Month

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.

Authentication Bypass Oracle Java Graalvm Jdk +12

NVD VulDB

CVSS 3.1

5.3

EPSS

0.2%

CVE-2020-14573 LOW PATCH Monitor

Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Oracle Authentication Bypass Jdk E Series Santricity Os Controller +7

NVD

CVSS 3.1

3.7

EPSS

3.4%

CVE-2020-14562 MEDIUM PATCH This Month

Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Java Denial Of Service Oracle Jdk E Series Santricity Os Controller +7

NVD

CVSS 3.1

5.3

EPSS

5.2%

CVE-2019-2999 MEDIUM PATCH This Month

Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Jdk Jre +17

NVD

CVSS 3.1

4.7

EPSS

2.7%

CVE-2019-2996 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment). Rated medium severity (CVSS 4.2), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Jdk Jre +12

NVD

CVSS 3.1

4.2

EPSS

2.2%

CVE-2019-2992 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +17

NVD

CVSS 3.1

3.7

EPSS

3.5%

CVE-2019-2989 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Graalvm Jdk +10

NVD

CVSS 3.1

6.8

EPSS

3.2%

CVE-2019-2988 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +17

NVD

CVSS 3.1

3.7

EPSS

3.3%

CVE-2019-2987 LOW PATCH Monitor

Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +10

NVD

CVSS 3.1

3.7

EPSS

3.4%

CVE-2019-2983 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +17

NVD

CVSS 3.1

3.7

EPSS

3.7%

CVE-2019-2981 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +17

NVD

CVSS 3.1

3.7

EPSS

3.7%

CVE-2019-2978 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +18

NVD

CVSS 3.1

3.7

EPSS

3.3%

CVE-2019-2977 MEDIUM PATCH This Month

Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +8

NVD

CVSS 3.1

4.8

EPSS

2.6%

CVE-2019-2975 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +16

NVD

CVSS 3.1

4.8

EPSS

3.3%

CVE-2019-2973 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +18

NVD

CVSS 3.1

3.7

EPSS

3.7%

CVE-2019-2964 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +17

NVD

CVSS 3.1

3.7

EPSS

3.5%

CVE-2019-2962 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +17

NVD

CVSS 3.1

3.7

EPSS

3.5%

CVE-2019-2958 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Jdk Jre +8

NVD

CVSS 3.1

5.9

EPSS

2.6%

CVE-2019-2949 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Jdk Jre +13

NVD

CVSS 3.1

6.8

EPSS

3.6%

CVE-2019-2945 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +17

NVD

CVSS 3.1

3.1

EPSS

3.4%

CVE-2019-11068 Ruby CRITICAL PATCH GHSA Act Now

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Libxslt Ubuntu Linux Debian Linux Fedora +18

NVD VulDB

CVSS 3.1

9.8

EPSS

1.1%

CVE-2019-7317 MEDIUM POC PATCH This Month

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Use After Free Information Disclosure Memory Corruption Libpng Debian Linux +30

NVD GitHub VulDB

CVSS 3.1

5.3

EPSS

0.6%

CVE-2024-47554 Maven

EPSS 1% CVSS 4.3

MEDIUM PATCH This Month

Apache Denial Of Service Commons Io +7

NVD

CVE-2023-46604 Maven

EPSS 100% CVSS 9.8

CRITICAL POC KEV EUVD KEV PATCH THREAT Act Now

Java Deserialization Activemq +5

NVD

CVE-2023-26049 Maven

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

Java Information Disclosure Jetty +5

NVD GitHub

CVE-2022-39399

EPSS 0% CVSS 3.7

LOW PATCH Monitor

Authentication Bypass Oracle Java +15

NVD VulDB

CVE-2022-21628

EPSS 2% CVSS 5.3

MEDIUM PATCH This Month

Oracle Denial Of Service Java +15

NVD

CVE-2022-21626

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Oracle Denial Of Service Java +15

NVD VulDB

CVE-2022-21624

EPSS 0% CVSS 3.7

LOW PATCH Monitor

Deserialization Oracle Java +15

NVD VulDB

CVE-2022-21619

EPSS 0% CVSS 3.7

LOW PATCH Monitor

Authentication Bypass Oracle Java +15

NVD VulDB

CVE-2022-21618

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Authentication Bypass Oracle Java +14

NVD VulDB

CVE-2020-14573

EPSS 3% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Oracle Authentication Bypass +9

NVD

CVE-2020-14562

EPSS 5% CVSS 5.3

MEDIUM PATCH This Month

Java Denial Of Service Oracle +9

NVD

CVE-2019-2999

EPSS 3% CVSS 4.7

MEDIUM PATCH This Month

Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle +19

NVD

CVE-2019-2996

EPSS 2% CVSS 4.2

MEDIUM PATCH This Month

Authentication Bypass Java Oracle +14

NVD

CVE-2019-2992

EPSS 3% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +19

NVD

CVE-2019-2989

EPSS 3% CVSS 6.8

MEDIUM PATCH This Month

Authentication Bypass Java Oracle +12

NVD

CVE-2019-2988

EPSS 3% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +19

NVD

CVE-2019-2987

EPSS 3% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +12

NVD

CVE-2019-2983

EPSS 4% CVSS 3.7

LOW PATCH Monitor

Java Denial Of Service Oracle +19

NVD

CVE-2019-2981

EPSS 4% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +19

NVD

CVE-2019-2978

EPSS 3% CVSS 3.7

LOW PATCH Monitor

Java Denial Of Service Oracle +20

NVD

CVE-2019-2977

EPSS 3% CVSS 4.8

MEDIUM PATCH This Month

Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +10

NVD

CVE-2019-2975

EPSS 3% CVSS 4.8

MEDIUM PATCH This Month

Java Denial Of Service Oracle +18

NVD

CVE-2019-2973

EPSS 4% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +20

NVD

CVE-2019-2964

EPSS 4% CVSS 3.7

LOW PATCH Monitor

Java Denial Of Service Oracle +19

NVD

CVE-2019-2962

EPSS 4% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +19

NVD

CVE-2019-2958

EPSS 3% CVSS 5.9

MEDIUM PATCH This Month

Authentication Bypass Java Oracle +10

NVD

CVE-2019-2949

EPSS 4% CVSS 6.8

MEDIUM PATCH This Month

Authentication Bypass Java Oracle +15

NVD

CVE-2019-2945

EPSS 3% CVSS 3.1

LOW PATCH Monitor

Java Denial Of Service Oracle +19

NVD

CVE-2019-11068 Ruby

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

Authentication Bypass Libxslt Ubuntu Linux +20

NVD VulDB

CVE-2019-7317

EPSS 1% CVSS 5.3

MEDIUM POC PATCH This Month

Use After Free Information Disclosure Memory Corruption +32

NVD GitHub VulDB