[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXumWtqFDDU7De7PyQyKJ2oErjsFd8Qkk4NNXMMSu0Jo":3,"g5a-family:netapp\u002Fdata_availability_services":105,"g5a-ex:netapp\u002Fdata_availability_services@*":106},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":73,"seoMetadata":83,"meta":102},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"netapp","data_availability_services",0,61,2,"2020-02-25",[],"Data Availability Services by Netapp is a technology product and 61 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,33,39,46,51,55,60,64,68],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2020-1938","When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible. It is important to note that mitigation is only required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations.","2020-02-24",9.8,"v3.1","Critical",0.9927,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":32},"CVE-2020-5398","In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a \"Content-Disposition\" header in the response where the filename attribute is derived from user supplied input.","2020-01-17",7.5,"High",false,0.88768,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":22,"severity":30,"isKev":4,"epssScore":38},"CVE-2019-2215","A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","2019-10-11",7.8,0.72105,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":22,"severity":44,"isKev":31,"epssScore":45},"CVE-2019-5108","An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.","2019-12-23",6.5,"Medium",0.10114,{"cveId":47,"description":48,"publishedDate":20,"cvssScore":49,"cvssVersion":22,"severity":44,"isKev":31,"epssScore":50},"CVE-2020-1935","In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.",4.8,0.09386,{"cveId":52,"description":53,"publishedDate":20,"cvssScore":49,"cvssVersion":22,"severity":44,"isKev":31,"epssScore":54},"CVE-2019-17569","The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.",0.08872,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":59},"CVE-2019-19052","A memory leak in the gs_can_open() function in drivers\u002Fnet\u002Fcan\u002Fusb\u002Fgs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.","2019-11-18",0.05232,{"cveId":61,"description":62,"publishedDate":58,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":63},"CVE-2019-19050","A memory leak in the crypto_reportstat() function in crypto\u002Fcrypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.",0.05077,{"cveId":65,"description":66,"publishedDate":58,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":67},"CVE-2019-19044","Two memory leaks in the v3d_submit_cl_ioctl() function in drivers\u002Fgpu\u002Fdrm\u002Fv3d\u002Fv3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.",0.04034,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":72},"CVE-2019-15538","An issue was discovered in xfs_setattr_nonsize in fs\u002Fxfs\u002Fxfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.","2019-08-25",0.03916,[74,79],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":75,"cisaDateAdded":76,"cisaShortDescription":77,"cisaRequiredAction":78},"Apache Tomcat Improper Privilege Management Vulnerability","2022-03-03","Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.","Apply updates per vendor instructions.",{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"severity":30,"isKev":4,"epssScore":38,"cisaVulnName":80,"cisaDateAdded":81,"cisaShortDescription":82,"cisaRequiredAction":78},"Android Kernel Use-After-Free Vulnerability","2021-11-03","Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"",{"title":84,"metaDescription":85,"keywords":86,"structuredData":87},"Data Availability Services by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Data Availability Services by Netapp with 61 tracked vulnerabilities including 1 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Data Availability Services vulnerabilities, Data Availability Services security, Data Availability Services CVE, Netapp Data Availability Services, Data Availability Services threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Data Availability Services KEV, Data Availability Services exploited vulnerabilities",{"@context":88,"@type":89,"name":90,"description":85,"url":91,"manufacturer":92,"applicationCategory":96,"softwareVersion":97,"mainEntity":98},"https:\u002F\u002Fschema.org","SoftwareApplication","Data Availability Services","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fdata_availability_services",{"@type":93,"name":94,"url":95},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":99,"name":100,"description":101,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Data Availability Services Security Vulnerabilities","Security vulnerabilities affecting Data Availability Services by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":103,"apiVersion":104},"2026-10-17T15:07:49.993Z","3.0",[],{"rows":107,"total":11,"capped":31,"failed":9},[108,112],{"cveId":18,"name":75,"severity":23,"cvss":21,"added":76,"epss":24,"published":109,"ranges":110,"checked":4,"hits":111,"covers":31},"2020-02-24T22:15:12.057",[],[],{"cveId":34,"name":80,"severity":30,"cvss":37,"added":81,"epss":38,"published":113,"ranges":114,"checked":4,"hits":115,"covers":31},"2019-10-11T19:15:10.947",[],[]]