E-series Santricity Web Services vulnerabilities | LiveThreat CVE Feed

Product

E-series Santricity Web Services

by Netapp · last CVE Apr 18, 2023

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities99 In the news0 Timeline

Severity mix

Critical 6High 18Medium 56Low 19

Severity

All severities99 Critical6 High18 Medium56 Low19

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add E-series Santricity Web Services to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-21277	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2022-21271	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2021-35586	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified
CVE-2021-35578	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2021-35565	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2021-35564	5.3	6%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool) Affected: All versions, or not specified
CVE-2021-35561	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility) Affected: All versions, or not specified
CVE-2021-35559	5.3	16%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: All versions, or not specified
CVE-2021-35556	5.3	8%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: All versions, or not specified
CVE-2021-34429	5.3	99%	Jul 15	For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or… Affected: All versions, or not specified
CVE-2021-28164	5.3	82%	Apr 1	In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources… Affected: All versions, or not specified
CVE-2020-27223	5.3	78%	Feb 26	In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of… Affected: All versions, or not specified
CVE-2020-14621	5.3	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified
CVE-2020-2830	5.3	5%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency) Affected: All versions, or not specified
CVE-2020-2781	5.3	5%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2019-13118	5.3	5%	Jul 1	In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to… Affected: All versions, or not specified
CVE-2019-7317	5.3	9%	Feb 4	png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute Affected: before 4.0
CVE-2017-10357	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified
CVE-2017-10355	5.3	16%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: All versions, or not specified
CVE-2017-10350	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS) Affected: All versions, or not specified
CVE-2017-10349	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: All versions, or not specified
CVE-2017-10348	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified
CVE-2017-10347	5.3	3%	Oct 19	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified
CVE-2017-10281	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified
CVE-2020-14556	4.8	3%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-2800	4.8	3%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server) Affected: All versions, or not specified
CVE-2020-2767	4.8	2%	Apr 15	Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2020-2593	4.8	3%	Jan 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: All versions, or not specified
CVE-2018-2581	4.7	3%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: All versions, or not specified
CVE-2017-10295	4.0	2%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: All versions, or not specified
CVE-2022-21443	3.7	3%	Apr 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2022-21248	3.7	4%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified
CVE-2021-35603	3.7	4%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2020-14779	3.7	4%	Oct 21	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified
CVE-2020-14581	3.7	3%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: All versions, or not specified
CVE-2020-14579	3.7	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-14578	3.7	4%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2020-14577	3.7	3%	Jul 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2020-2778	3.7	2%	Apr 15	Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified
CVE-2020-2773	3.7	4%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: All versions, or not specified
CVE-2020-2757	3.7	4%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified
CVE-2020-2756	3.7	4%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified
CVE-2020-2755	3.7	4%	Apr 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting) Affected: All versions, or not specified
CVE-2020-2590	3.7	3%	Jan 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: All versions, or not specified
CVE-2020-2583	3.7	4%	Jan 15	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified
CVE-2021-34428	3.5	1%	Jun 22	For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in… Affected: All versions, or not specified
CVE-2021-35588	3.1	4%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2017-10345	3.1	2%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified
CVE-2021-28163	2.7	4%	Apr 1	In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory… Affected: All versions, or not specified