E Series Santricity Web Services Proxy

34 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-47554 Maven MEDIUM PATCH This Month

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Apache Denial Of Service Commons Io Active Iq Unified Manager Bluexp +5

NVD

CVSS 3.1

4.3

EPSS

1.2%

CVE-2023-46604 Maven CRITICAL POC KEV EUVD KEV PATCH THREAT Act Now

The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Java Deserialization Activemq Activemq Legacy Openwire Module Debian Linux +3

NVD

CVSS 3.1

9.8

EPSS

99.7%

CVE-2020-14803 MEDIUM PATCH This Month

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Java Oracle Authentication Bypass Openjdk Graalvm +17

NVD

CVSS 3.1

5.3

EPSS

3.1%

CVE-2020-14798 LOW Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Java Oracle Authentication Bypass Openjdk Jdk +16

NVD

CVSS 3.1

3.1

EPSS

2.7%

CVE-2020-14797 LOW Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Java Oracle Authentication Bypass Openjdk Jdk +16

NVD

CVSS 3.1

3.7

EPSS

2.2%

CVE-2020-14796 LOW Monitor

Java Oracle Authentication Bypass Openjdk Jdk +16

NVD

CVSS 3.1

3.1

EPSS

2.5%

CVE-2020-14792 MEDIUM This Month

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Rated medium severity (CVSS 4.2), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Java Oracle Authentication Bypass Openjdk Jdk +17

NVD

CVSS 3.1

4.2

EPSS

2.2%

CVE-2020-14782 LOW Monitor

Java Oracle Authentication Bypass Openjdk Jdk +14

NVD

CVSS 3.1

3.7

EPSS

2.2%

CVE-2020-14781 LOW Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Java Oracle Authentication Bypass Openjdk Jdk +15

NVD

CVSS 3.1

3.7

EPSS

2.3%

CVE-2020-14573 LOW PATCH Monitor

Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Oracle Authentication Bypass Jdk E Series Santricity Os Controller +7

NVD

CVSS 3.1

3.7

EPSS

3.4%

CVE-2020-14562 MEDIUM PATCH This Month

Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Java Denial Of Service Oracle Jdk E Series Santricity Os Controller +7

NVD

CVSS 3.1

5.3

EPSS

5.2%

CVE-2020-2659 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +21

NVD

CVSS 3.1

3.7

EPSS

4.2%

CVE-2020-2654 LOW PATCH Monitor

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +21

NVD

CVSS 3.1

3.7

EPSS

3.8%

CVE-2020-2604 HIGH PATCH This Week

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

Oracle Java Deserialization Commerce Experience Manager Commerce Guided Search +25

NVD

CVSS 3.1

8.1

EPSS

4.9%

CVE-2019-2999 MEDIUM PATCH This Month

Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Jdk Jre +17

NVD

CVSS 3.1

4.7

EPSS

2.7%

CVE-2019-2996 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment). Rated medium severity (CVSS 4.2), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Jdk Jre +12

NVD

CVSS 3.1

4.2

EPSS

2.2%

CVE-2019-2992 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +17

NVD

CVSS 3.1

3.7

EPSS

3.5%

CVE-2019-2989 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Graalvm Jdk +10

NVD

CVSS 3.1

6.8

EPSS

3.2%

CVE-2019-2988 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +17

NVD

CVSS 3.1

3.7

EPSS

3.3%

CVE-2019-2987 LOW PATCH Monitor

Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +10

NVD

CVSS 3.1

3.7

EPSS

3.4%

CVE-2019-2983 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +17

NVD

CVSS 3.1

3.7

EPSS

3.7%

CVE-2019-2981 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +17

NVD

CVSS 3.1

3.7

EPSS

3.7%

CVE-2019-2978 LOW PATCH Monitor

Java Denial Of Service Oracle Jdk Jre +18

NVD

CVSS 3.1

3.7

EPSS

3.3%

CVE-2019-2977 MEDIUM PATCH This Month

Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +8

NVD

CVSS 3.1

4.8

EPSS

2.6%

CVE-2019-2975 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +16

NVD

CVSS 3.1

4.8

EPSS

3.3%

CVE-2019-2973 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +18

NVD

CVSS 3.1

3.7

EPSS

3.7%

CVE-2019-2964 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +17

NVD

CVSS 3.1

3.7

EPSS

3.5%

CVE-2019-2962 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +17

NVD

CVSS 3.1

3.7

EPSS

3.5%

CVE-2019-2958 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Jdk Jre +8

NVD

CVSS 3.1

5.9

EPSS

2.6%

CVE-2019-2949 MEDIUM PATCH This Month

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Jdk Jre +13

NVD

CVSS 3.1

6.8

EPSS

3.6%

CVE-2019-2945 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle Jdk Jre +17

NVD

CVSS 3.1

3.1

EPSS

3.4%

CVE-2019-11068 Ruby CRITICAL PATCH GHSA Act Now

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Libxslt Ubuntu Linux Debian Linux Fedora +18

NVD VulDB

CVSS 3.1

9.8

EPSS

1.1%

CVE-2018-12538 Maven HIGH PATCH This Week

In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Jetty E Series Santricity Management Plug Ins E Series Santricity Os Controller E Series Santricity Web Services Proxy +8

NVD

CVSS 3.0

8.8

EPSS

2.7%

CVE-2018-5968 Maven HIGH PATCH This Week

FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Deserialization Jackson Databind Debian Linux Openshift Container Platform +6

NVD GitHub

CVSS 3.1

8.1

EPSS

7.0%

CVE-2024-47554 Maven

EPSS 1% CVSS 4.3

MEDIUM PATCH This Month

Apache Denial Of Service Commons Io +7

NVD

CVE-2023-46604 Maven

EPSS 100% CVSS 9.8

CRITICAL POC KEV EUVD KEV PATCH THREAT Act Now

Java Deserialization Activemq +5

NVD

CVE-2020-14803

EPSS 3% CVSS 5.3

MEDIUM PATCH This Month

Java Oracle Authentication Bypass +19

NVD

CVE-2020-14798

EPSS 3% CVSS 3.1

LOW Monitor

Java Oracle Authentication Bypass +18

NVD

CVE-2020-14797

EPSS 2% CVSS 3.7

LOW Monitor

Java Oracle Authentication Bypass +18

NVD

CVE-2020-14796

EPSS 2% CVSS 3.1

LOW Monitor

Java Oracle Authentication Bypass +18

NVD

CVE-2020-14792

EPSS 2% CVSS 4.2

MEDIUM This Month

Java Oracle Authentication Bypass +19

NVD

CVE-2020-14782

EPSS 2% CVSS 3.7

LOW Monitor

Java Oracle Authentication Bypass +16

NVD

CVE-2020-14781

EPSS 2% CVSS 3.7

LOW Monitor

Java Oracle Authentication Bypass +17

NVD

CVE-2020-14573

EPSS 3% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Oracle Authentication Bypass +9

NVD

CVE-2020-14562

EPSS 5% CVSS 5.3

MEDIUM PATCH This Month

Java Denial Of Service Oracle +9

NVD

CVE-2020-2659

EPSS 4% CVSS 3.7

LOW PATCH Monitor

Java Denial Of Service Oracle +23

NVD

CVE-2020-2654

EPSS 4% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +23

NVD

CVE-2020-2604

EPSS 5% CVSS 8.1

HIGH PATCH This Week

Oracle Java Deserialization +27

NVD

CVE-2019-2999

EPSS 3% CVSS 4.7

MEDIUM PATCH This Month

Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle +19

NVD

CVE-2019-2996

EPSS 2% CVSS 4.2

MEDIUM PATCH This Month

Authentication Bypass Java Oracle +14

NVD

CVE-2019-2992

EPSS 3% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +19

NVD

CVE-2019-2989

EPSS 3% CVSS 6.8

MEDIUM PATCH This Month

Authentication Bypass Java Oracle +12

NVD

CVE-2019-2988

EPSS 3% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +19

NVD

CVE-2019-2987

EPSS 3% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +12

NVD

CVE-2019-2983

EPSS 4% CVSS 3.7

LOW PATCH Monitor

Java Denial Of Service Oracle +19

NVD

CVE-2019-2981

EPSS 4% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +19

NVD

CVE-2019-2978

EPSS 3% CVSS 3.7

LOW PATCH Monitor

Java Denial Of Service Oracle +20

NVD

CVE-2019-2977

EPSS 3% CVSS 4.8

MEDIUM PATCH This Month

Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +10

NVD

CVE-2019-2975

EPSS 3% CVSS 4.8

MEDIUM PATCH This Month

Java Denial Of Service Oracle +18

NVD

CVE-2019-2973

EPSS 4% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +20

NVD

CVE-2019-2964

EPSS 4% CVSS 3.7

LOW PATCH Monitor

Java Denial Of Service Oracle +19

NVD

CVE-2019-2962

EPSS 4% CVSS 3.7

LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Java Denial Of Service Oracle +19

NVD

CVE-2019-2958

EPSS 3% CVSS 5.9

MEDIUM PATCH This Month

Authentication Bypass Java Oracle +10

NVD

CVE-2019-2949

EPSS 4% CVSS 6.8

MEDIUM PATCH This Month

Authentication Bypass Java Oracle +15

NVD

CVE-2019-2945

EPSS 3% CVSS 3.1

LOW PATCH Monitor

Java Denial Of Service Oracle +19

NVD

CVE-2019-11068 Ruby

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

Authentication Bypass Libxslt Ubuntu Linux +20

NVD VulDB

CVE-2018-12538 Maven

EPSS 3% CVSS 8.8

HIGH PATCH This Week

Information Disclosure Jetty E Series Santricity Management Plug Ins +10

NVD

CVE-2018-5968 Maven

EPSS 7% CVSS 8.1

HIGH PATCH This Week

RCE Deserialization Jackson Databind +8

NVD GitHub