Vasa Provider For Clustered Data Ontap (Netapp) - vulnerabilities (CVEs)

69 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2021-04-01. Vendor: Netapp.

CVEs of Vasa Provider For Clustered Data Ontap

• CVE-2021-28164 - CVSS 5.3 (medium), 2021-04-01: In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access…
• CVE-2021-28163 - CVSS 2.7 (low), 2021-04-01: In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of…
• CVE-2021-28165 - CVSS 7.5 (high), 2021-04-01: In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
• CVE-2020-13954 - CVSS 6.1 (medium), 2020-11-12: By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected…
• CVE-2020-11868 - CVSS 7.5 (high), 2020-04-17: ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a…
• CVE-2019-11815 - CVSS 8.1 (high), 2019-05-08: An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related…
• CVE-2018-20836 - CVSS 8.1 (high), 2019-05-07: An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in…
• CVE-2019-3900 - CVSS 7.7 (high), 2019-04-25: An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx().…
• CVE-2019-3882 - CVSS 5.5 (medium), 2019-04-24: A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio…
• CVE-2019-11486 - CVSS 7 (high), 2019-04-23: The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions.
• CVE-2019-10246 - CVSS 5.3 (medium), 2019-04-22: In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory…
• CVE-2019-10247 - CVSS 5.3 (medium), 2019-04-22: In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will…
• CVE-2019-3901 - CVSS 5.6 (medium), 2019-04-22: A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the…
• CVE-2018-2964 - CVSS 8.3 (high), 2018-07-18: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u172 and 10.0.1.…
• CVE-2018-2973 - CVSS 5.9 (medium), 2018-07-18: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191,…
• CVE-2018-2941 - CVSS 8.3 (high), 2018-07-18: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u181, 8u172 and 10.0.1.…
• CVE-2018-2940 - CVSS 4.3 (medium), 2018-07-18: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191,…
• CVE-2018-2952 - CVSS 3.7 (low), 2018-07-18: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java…
• CVE-2018-2938 - CVSS 9 (critical), 2018-07-18: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172.…
• CVE-2018-2942 - CVSS 8.3 (high), 2018-07-18: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). Supported versions that are affected are Java SE: 7u181 and 8u172.…
• CVE-2018-2638 - CVSS 8.3 (high), 2018-01-18: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u152 and 9.0.1.…
• CVE-2018-2627 - CVSS 7.5 (high), 2018-01-18: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java SE: 8u152 and 9.0.1.…
• CVE-2018-2581 - CVSS 4.7 (medium), 2018-01-18: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1.…
• CVE-2016-6904 - CVSS 8.1 (high), 2017-12-11: Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an…
• CVE-2017-15906 - CVSS 5.3 (medium), 2017-10-26: The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create…
• CVE-2017-10388 - CVSS 7.5 (high), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161,…
• CVE-2017-10348 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161,…
• CVE-2017-10355 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java…
• CVE-2017-10347 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161,…
• CVE-2017-10350 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151,…
• CVE-2017-10357 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE:…
• CVE-2017-10346 - CVSS 9.6 (critical), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161,…
• CVE-2017-10349 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161,…
• CVE-2017-10356 - CVSS 6.2 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
• CVE-2017-10345 - CVSS 3.1 (low), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
• CVE-2017-10293 - CVSS 6.1 (medium), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9.…
• CVE-2017-10285 - CVSS 9.6 (critical), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161,…
• CVE-2017-10309 - CVSS 7.1 (high), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily…
• CVE-2017-10281 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
• CVE-2017-10295 - CVSS 4 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java…
• CVE-2017-10274 - CVSS 6.8 (medium), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144…
• CVE-2017-10243 - CVSS 6.5 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE:…
• CVE-2017-10176 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
• CVE-2017-10198 - CVSS 6.8 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
• CVE-2017-10193 - CVSS 3.1 (low), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151,…
• CVE-2017-10135 - CVSS 5.9 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
• CVE-2017-10125 - CVSS 7.1 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131.…
• CVE-2017-10105 - CVSS 4.3 (medium), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
• CVE-2017-10109 - CVSS 5.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
• CVE-2017-10114 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult…
• CVE-2017-10118 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
• CVE-2017-10102 - CVSS 9 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141…
• CVE-2017-10108 - CVSS 5.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
• CVE-2017-10111 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE:…
• CVE-2017-10116 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
• CVE-2017-10101 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151,…
• CVE-2017-10107 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141…
• CVE-2017-10110 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily…
• CVE-2017-10115 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
• CVE-2017-10096 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151,…
• CVE-2017-10074 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151,…
• CVE-2017-10086 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily…
• CVE-2017-10090 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141…
• CVE-2017-10067 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
• CVE-2017-10081 - CVSS 4.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151,…
• CVE-2017-10089 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
• CVE-2017-10078 - CVSS 8.1 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java SE: 8u131. Easily…
• CVE-2017-10087 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151,…
• CVE-2016-9841 - CVSS 9.8 (critical), 2017-05-23: inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
• CVE-2016-3427 - CVSS 9.8 (critical), 2016-04-21: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect…