Oceanstor 9000 Firmware (Huawei) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2020-02-10. Vendor: Huawei.

CVEs of Oceanstor 9000 Firmware

• CVE-2020-8840 - CVSS 9.8 (critical), 2020-02-10: FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.
• CVE-2016-3081 - CVSS 8.1 (high), 2016-04-26: Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute…
• CVE-2015-2808 - CVSS 3.7 (low), 2015-04-01: The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which…