Santricity Web Services Proxy

7 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-39399 LOW PATCH Monitor

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Oracle Java Graalvm Jdk +13

NVD VulDB

CVSS 3.1

3.7

EPSS

0.3%

CVE-2022-21628 MEDIUM PATCH This Month

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Oracle Denial Of Service Java Graalvm Jdk +13

NVD

CVSS 3.1

5.3

EPSS

2.0%

CVE-2022-21626 MEDIUM PATCH This Month

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Oracle Denial Of Service Java Graalvm Jdk +13

NVD VulDB

CVSS 3.1

5.3

EPSS

0.1%

CVE-2022-21624 LOW PATCH Monitor

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

Deserialization Oracle Java Graalvm Jdk +13

NVD VulDB

CVSS 3.1

3.7

EPSS

0.2%

CVE-2022-21619 LOW PATCH Monitor

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Oracle Java Graalvm Jdk +13

NVD VulDB

CVSS 3.1

3.7

EPSS

0.3%

CVE-2021-28165 Maven HIGH POC PATCH THREAT This Week

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Jetty Autovue For Agile Product Lifecycle Management Communications Cloud Native Core Policy Communications Element Manager +17

NVD GitHub

CVSS 3.1

7.5

EPSS

53.9%

CVE-2018-5488 CRITICAL Act Now

NetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through 2.12.X000.0002 and SANtricity Storage Manager 11.30.0X00.0004 through 11.42.0X00.0001 ship with the Java Management Extension. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Java RCE Santricity Storage Manager Santricity Web Services Proxy

NVD

CVSS 3.0

9.8

EPSS

4.0%

CVE-2022-39399

EPSS 0% CVSS 3.7

LOW PATCH Monitor

Authentication Bypass Oracle Java +15

NVD VulDB

CVE-2022-21628

EPSS 2% CVSS 5.3

MEDIUM PATCH This Month

Oracle Denial Of Service Java +15

NVD

CVE-2022-21626

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Oracle Denial Of Service Java +15

NVD VulDB

CVE-2022-21624

EPSS 0% CVSS 3.7

LOW PATCH Monitor

Deserialization Oracle Java +15

NVD VulDB

CVE-2022-21619

EPSS 0% CVSS 3.7

LOW PATCH Monitor

Authentication Bypass Oracle Java +15

NVD VulDB

CVE-2021-28165 Maven

EPSS 54% CVSS 7.5

HIGH POC PATCH THREAT This Week

Denial Of Service Jetty Autovue For Agile Product Lifecycle Management +19

NVD GitHub

CVE-2018-5488

EPSS 4% CVSS 9.8

CRITICAL Act Now

Java RCE Santricity Storage Manager +1

NVD