netapp

2,510 tracked vulnerabilities.

CVE-2017-10378 MEDIUM
MySQL < 5.5.57, 5.6.37, 5.7.11 - Authenticated Denial of Service in Server Optimizer
Oct 19, 2017
CVSS 6.5
EPSS 0.00
CVE-2017-10365 LOW
Oracle MySQL Server <= 5.7.18 - Authenticated Partial Denial of Service and Data Manipulation in InnoDB
Oct 19, 2017
CVSS 3.8
EPSS 0.00
CVE-2017-10357 MEDIUM
Oracle JDK and JRE 6u161, 7u151, 8u144, 9 - Unauthenticated Partial Denial of Service via Serialization
Oct 19, 2017
CVSS 5.3
EPSS 0.01
CVE-2017-10356 MEDIUM
Oracle Java SE <9 - Unauthenticated RCE
Oct 19, 2017
CVSS 6.2
EPSS 0.01
CVE-2017-10355 MEDIUM
Oracle JDK 6u161, 7u151, 8u144, 9 and Java SE Embedded 8u144 - Unauthenticated Partial Denial of Service via Networking
Oct 19, 2017
CVSS 5.3
EPSS 0.06
CVE-2017-10350 MEDIUM
Oracle JDK and JRE - Unauthenticated Partial Denial of Service in JAX-WS
Oct 19, 2017
CVSS 5.3
EPSS 0.01
CVE-2017-10349 MEDIUM
Oracle JDK and JRE 6u161, 7u151, 8u144, 9 - Unauthenticated Partial Denial of Service in JAXP
Oct 19, 2017
CVSS 5.3
EPSS 0.01
CVE-2017-10348 MEDIUM
Oracle JDK and JRE 6u161, 7u151, 8u144, 9 - Unauthenticated Partial Denial of Service via Multiple Protocols
Oct 19, 2017
CVSS 5.3
EPSS 0.01
CVE-2017-10347 MEDIUM
Oracle JDK and JRE - Unauthenticated Partial Denial of Service via Serialization
Oct 19, 2017
CVSS 5.3
EPSS 0.01
CVE-2017-10346 CRITICAL
Oracle Java SE <9 - Info Disclosure
Oct 19, 2017
CVSS 9.6
EPSS 0.00
CVE-2017-10345 LOW
Oracle JDK and JRE - Partial Denial of Service via Serialization
Oct 19, 2017
CVSS 3.1
EPSS 0.01
CVE-2017-10320 MEDIUM
Oracle MySQL Server <= 5.7.19 - Authenticated Denial of Service in InnoDB
Oct 19, 2017
CVSS 4.9
EPSS 0.00
CVE-2017-10309 HIGH
Oracle JDK 8u144 and 9 - Unauthenticated Partial Denial of Service and Data Manipulation via Deployment Subcomponent
Oct 19, 2017
CVSS 7.1
EPSS 0.02
CVE-2017-10295 MEDIUM
Oracle JDK 6u161, 7u151, 8u144, 9 and JRockit R28.3.15 - Unauthenticated Data Manipulation via HTTP
Oct 19, 2017
CVSS 4.0
EPSS 0.00
CVE-2017-10293 MEDIUM
Oracle Java SE - Javadoc Info Disclosure
Oct 19, 2017
CVSS 6.1
EPSS 0.00
CVE-2017-10286 MEDIUM
Oracle MySQL Server InnoDB - Denial of Service
Oct 19, 2017
CVSS 4.4
EPSS 0.00
CVE-2017-10285 CRITICAL
Oracle JDK and JRE - Remote Code Execution via RMI
Oct 19, 2017
CVSS 9.6
EPSS 0.00
CVE-2017-10281 MEDIUM
Oracle JDK 6u161, 7u151, 8u144, 9 and JRockit R28.3.15 - Unauthenticated Partial Denial of Service via Serialization
Oct 19, 2017
CVSS 5.3
EPSS 0.01
CVE-2017-10274 MEDIUM
Oracle Java SE - Java SE: 6u161-9 - Info Disclosure
Oct 19, 2017
CVSS 6.8
EPSS 0.01
CVE-2017-10268 MEDIUM
Oracle MySQL <5.7.19 - Privilege Escalation
Oct 19, 2017
CVSS 4.1
EPSS 0.00
CVE-2017-12617 HIGH KEVNUCLEI
Apache Tomcat 7.0.0-7.0.81, 8.0.0.RC1-8.0.46, 8.5.0-8.5.22, 9.0.0.M1-9.0.0 - Remote Code Execution via JSP Upload
Oct 04, 2017
CVSS 8.1
EPSS 0.94
CVE-2017-12615 HIGH KEVNUCLEI
Apache Tomcat 7.0.0-7.0.79 - Unauthenticated Remote Code Execution via JSP Upload
Sep 19, 2017
CVSS 8.1
EPSS 0.94
CVE-2017-9805 HIGH KEVNUCLEI
Apache Struts 2 REST Plugin XStream RCE
Sep 15, 2017
CVSS 8.1
EPSS 0.94
CVE-2017-14053 HIGH
NetApp OnCommand Unified Manager <7.2P1 - Info Disclosure
Sep 01, 2017
CVSS 7.5
EPSS 0.00
CVE-2017-12423 HIGH
NetApp Clustered Data ONTAP <8.3.2P12 - Info Disclosure
Sep 01, 2017
CVSS 7.7
EPSS 0.00
Products
oncommand_insight 971 active_iq_unified_manager 848 oncommand_workflow_automation 743 snapcenter 575 cloud_backup 345 h700s_firmware 289 h300s_firmware 288 h410s_firmware 288 h500s_firmware 288 e-series_santricity_os_controller 242 h410c_firmware 236 steelstore_cloud_integrated_storage 211 solidfire 192 clustered_data_ontap 187 hci_management_node 182 snapmanager 180 ontap_select_deploy_administration_utility 179 oncommand_unified_manager 169 h700e_firmware 149 h300e_firmware 148 h500e_firmware 148 e-series_santricity_storage_manager 140 storage_automation_store 113 solidfire_\&_hci_management_node 103 element_software 100 e-series_santricity_web_services 99 oncommand_balance 83 santricity_unified_manager 77 7-mode_transition_tool 75 oncommand_performance_manager 73
Quick Filters
Critical CVEs With Exploits In CISA KEV