Santricity Web Services Proxy

7 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-39399 Oct 18, 21:15 LOW PATCH Monitor

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle E Series Santricity Os Controller E Series Santricity Storage Manager +16

NVD VulDB

CVSS 3.1

3.7

EPSS

0.3%

CVE-2022-21628 Oct 18, 21:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Java Oracle E Series Santricity Os Controller E Series Santricity Storage Manager +16

NVD

CVSS 3.1

5.3

EPSS

2.0%

CVE-2022-21626 Oct 18, 21:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Java Oracle E Series Santricity Os Controller E Series Santricity Storage Manager +16

NVD VulDB

CVSS 3.1

5.3

EPSS

0.1%

CVE-2022-21624 Oct 18, 21:15 LOW PATCH Monitor

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

Java Deserialization Oracle E Series Santricity Os Controller E Series Santricity Storage Manager +16

NVD VulDB

CVSS 3.1

3.7

EPSS

0.2%

CVE-2022-21619 Oct 18, 21:15 LOW PATCH Monitor

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle E Series Santricity Os Controller E Series Santricity Storage Manager +16

NVD VulDB

CVSS 3.1

3.7

EPSS

0.3%

CVE-2021-28165 Apr 01, 15:15 Maven HIGH POC PATCH THREAT This Week

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Oracle Jenkins E Series Santricity Os Controller E Series Santricity Web Services +20

NVD GitHub

CVSS 3.1

7.5

EPSS

53.9%

CVE-2018-5488 Jun 13, 20:29 CRITICAL Act Now

NetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through 2.12.X000.0002 and SANtricity Storage Manager 11.30.0X00.0004 through 11.42.0X00.0001 ship with the Java Management Extension. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Java Santricity Web Services Proxy Santricity Storage Manager Netapp

NVD

CVSS 3.0

9.8

EPSS

4.0%

CVE-2022-39399

EPSS 0% CVSS 3.7

LOW PATCH Monitor

Authentication Bypass Java Oracle +18

NVD VulDB

CVE-2022-21628

EPSS 2% CVSS 5.3

MEDIUM PATCH This Month

Denial Of Service Java Oracle +18

NVD

CVE-2022-21626

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Denial Of Service Java Oracle +18

NVD VulDB

CVE-2022-21624

EPSS 0% CVSS 3.7

LOW PATCH Monitor

Java Deserialization Oracle +18

NVD VulDB

CVE-2022-21619

EPSS 0% CVSS 3.7

LOW PATCH Monitor

Authentication Bypass Java Oracle +18

NVD VulDB

CVE-2021-28165 Maven

EPSS 54% CVSS 7.5

HIGH POC PATCH THREAT This Week

Denial Of Service Oracle Jenkins +22

NVD GitHub

CVE-2018-5488

EPSS 4% CVSS 9.8

CRITICAL Act Now

RCE Java Santricity Web Services Proxy +2

NVD