[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFEZc7PO1r1FiUDTkKFHOnT5pG7DErGzz91bEGH7ToUg":3,"g5a-ex:netapp\u002F7-mode_transition_tool@*":146,"g5a-family:netapp\u002F7-mode_transition_tool":154},{"success":4,"data":5},true,{"product":6,"versions":45,"topVulnerabilitiesByEpss":60,"kevVulnerabilities":115,"seoMetadata":125,"meta":144},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":44},"netapp","7-mode_transition_tool",14,75,2,"2023-07-18",[14,18,20,22,24,26,28,30,32,34,36,38,40,42],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"1.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"1.2",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"1.3",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"1.4",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"2.0",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"2.1",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"2.2",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"2.3",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.1",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"3.0",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"3.1",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"3.2",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"3.3","7-mode Transition Tool by Netapp is a technology product with 14 tracked versions and 75 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[46,47,48,49,50,51,52,53,54,55,56,57,58,59],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},[61,69,76,82,87,92,99,102,108,112],{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":4,"epssScore":68},"CVE-2017-12615","When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-09-19",8.1,"v3.1","High",0.99641,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":66,"severity":74,"isKev":4,"epssScore":75},"CVE-2016-8735","Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.","2017-04-06",9.8,"Critical",0.90338,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":81},"CVE-2022-34169","The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 or later. Note: Java runtimes (such as OpenJDK) include repackaged copies of Xalan.","2022-07-19",7.5,0.81759,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":80,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":86},"CVE-2022-21449","Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N).","2022-04-19",0.77151,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":80,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":91},"CVE-2023-28709","The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If non-default HTTP       connector settings were used such that the maxParameterCount could be reached using query string parameters and a request was       submitted that supplied exactly maxParameterCount parameters in the query string, the limit for uploaded request parts could be bypassed with the potential for a denial of service to occur.","2023-05-22",0.48031,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":66,"severity":97,"isKev":17,"epssScore":98},"CVE-2022-21293","Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L).","2022-01-19",5.3,"Medium",0.08346,{"cveId":100,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":66,"severity":97,"isKev":17,"epssScore":101},"CVE-2022-21340",0.07748,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":106,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":107},"CVE-2020-2803","Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2020-04-15",8.3,0.0623,{"cveId":109,"description":110,"publishedDate":105,"cvssScore":96,"cvssVersion":66,"severity":97,"isKev":17,"epssScore":111},"CVE-2020-2830","Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L).",0.04948,{"cveId":113,"description":114,"publishedDate":105,"cvssScore":96,"cvssVersion":66,"severity":97,"isKev":17,"epssScore":111},"CVE-2020-2781","Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L).",[116,121],{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"severity":74,"isKev":4,"epssScore":75,"cisaVulnName":117,"cisaDateAdded":118,"cisaShortDescription":119,"cisaRequiredAction":120},"Apache Tomcat Remote Code Execution Vulnerability","2023-05-12","Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.","Apply updates per vendor instructions.",{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"severity":67,"isKev":4,"epssScore":68,"cisaVulnName":122,"cisaDateAdded":123,"cisaShortDescription":124,"cisaRequiredAction":120},"Apache Tomcat on Windows Remote Code Execution Vulnerability","2022-03-25","When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"title":126,"metaDescription":127,"keywords":128,"structuredData":129},"7-mode Transition Tool by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for 7-mode Transition Tool by Netapp covering 14 versions with 75 tracked vulnerabilities including 1 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","7-mode Transition Tool vulnerabilities, 7-mode Transition Tool security, 7-mode Transition Tool CVE, Netapp 7-mode Transition Tool, 7-mode Transition Tool threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, 7-mode Transition Tool KEV, 7-mode Transition Tool exploited vulnerabilities",{"@context":130,"@type":131,"name":132,"description":127,"url":133,"manufacturer":134,"applicationCategory":138,"softwareVersion":139,"mainEntity":140},"https:\u002F\u002Fschema.org","SoftwareApplication","7-mode Transition Tool","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002F7-mode_transition_tool",{"@type":135,"name":136,"url":137},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","14 versions tracked",{"@type":141,"name":142,"description":143,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","7-mode Transition Tool Security Vulnerabilities","Security vulnerabilities affecting 7-mode Transition Tool by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":145,"apiVersion":37},"2026-10-17T12:16:12.984Z",{"rows":147,"total":11,"capped":17,"failed":11},[148,151],{"cveId":70,"name":117,"severity":74,"cvss":73,"added":118,"epss":75,"published":72,"ranges":149,"hits":150,"checked":17,"covers":17},[],[],{"cveId":62,"name":122,"severity":67,"cvss":65,"added":123,"epss":68,"published":64,"ranges":152,"hits":153,"checked":17,"covers":17},[],[],[]]