[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPP_XON6Nbyp2SGc0SXptUaSJ--zz1sTeM01W6XvWvNA":3,"g5a-family:netapp\u002Fe-series_santricity_os_controller":170,"g5a-ex:netapp\u002Fe-series_santricity_os_controller@*":171},{"success":4,"data":5},true,{"product":6,"versions":59,"topVulnerabilitiesByEpss":80,"kevVulnerabilities":137,"seoMetadata":148,"meta":167},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":58},"netapp","e-series_santricity_os_controller",20,242,1,"2024-07-01",[14,19,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"11.0",11,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"11.0.0",10,{"version":23,"cve_count":21,"kev_count":17,"has_kev":18},"11.20",{"version":25,"cve_count":21,"kev_count":17,"has_kev":18},"11.25",{"version":27,"cve_count":21,"kev_count":17,"has_kev":18},"11.30",{"version":29,"cve_count":21,"kev_count":17,"has_kev":18},"11.30.5r3",{"version":31,"cve_count":21,"kev_count":17,"has_kev":18},"11.40",{"version":33,"cve_count":21,"kev_count":17,"has_kev":18},"11.40.3r2",{"version":35,"cve_count":21,"kev_count":17,"has_kev":18},"11.40.5",{"version":37,"cve_count":21,"kev_count":17,"has_kev":18},"11.50.1",{"version":39,"cve_count":21,"kev_count":17,"has_kev":18},"11.50.2",{"version":41,"cve_count":21,"kev_count":17,"has_kev":18},"11.60",{"version":43,"cve_count":21,"kev_count":17,"has_kev":18},"11.60.0",{"version":45,"cve_count":21,"kev_count":17,"has_kev":18},"11.60.1",{"version":47,"cve_count":21,"kev_count":17,"has_kev":18},"11.60.3",{"version":49,"cve_count":21,"kev_count":17,"has_kev":18},"11.70.1",{"version":51,"cve_count":16,"kev_count":17,"has_kev":18},"11.70.2",{"version":53,"cve_count":17,"kev_count":17,"has_kev":18},"8.00",{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},"8.40.40.00",{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},"8.40.50.00","E-series Santricity Os Controller by Netapp is a technology product with 20 tracked versions and 242 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":21,"kev_count":17,"has_kev":18},{"version":25,"cve_count":21,"kev_count":17,"has_kev":18},{"version":27,"cve_count":21,"kev_count":17,"has_kev":18},{"version":29,"cve_count":21,"kev_count":17,"has_kev":18},{"version":31,"cve_count":21,"kev_count":17,"has_kev":18},{"version":33,"cve_count":21,"kev_count":17,"has_kev":18},{"version":35,"cve_count":21,"kev_count":17,"has_kev":18},{"version":37,"cve_count":21,"kev_count":17,"has_kev":18},{"version":39,"cve_count":21,"kev_count":17,"has_kev":18},{"version":41,"cve_count":21,"kev_count":17,"has_kev":18},{"version":43,"cve_count":21,"kev_count":17,"has_kev":18},{"version":45,"cve_count":21,"kev_count":17,"has_kev":18},{"version":47,"cve_count":21,"kev_count":17,"has_kev":18},{"version":49,"cve_count":21,"kev_count":17,"has_kev":18},{"version":51,"cve_count":16,"kev_count":17,"has_kev":18},{"version":53,"cve_count":17,"kev_count":17,"has_kev":18},{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},[81,88,95,102,108,113,119,125,129,133],{"cveId":82,"description":83,"publishedDate":12,"cvssScore":84,"cvssVersion":85,"severity":86,"isKev":18,"epssScore":87},"CVE-2024-6387","A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.",8.1,"v3.1","High",0.99506,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"cvssVersion":85,"severity":93,"isKev":18,"epssScore":94},"CVE-2021-34429","For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and\u002For bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164\u002FGHSA-v7ff-8wcx-gmc5.","2021-07-15",5.3,"Medium",0.99298,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":85,"severity":100,"isKev":18,"epssScore":101},"CVE-2021-3711","In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the \"out\" parameter can be NULL and, on exit, the \"outlen\" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the \"out\" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).","2021-08-24",9.8,"Critical",0.87816,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":106,"cvssVersion":85,"severity":86,"isKev":18,"epssScore":107},"CVE-2019-12257","Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer\u002FACK parsing inside ipdhcpc.","2019-08-09",8.8,0.84177,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":92,"cvssVersion":85,"severity":93,"isKev":18,"epssScore":112},"CVE-2021-28164","In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to \u002Fcontext\u002F%2e\u002FWEB-INF\u002Fweb.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.","2021-04-01",0.82371,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":85,"severity":93,"isKev":18,"epssScore":118},"CVE-2020-27223","In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU usage processing those quality values, resulting in minutes of CPU time exhausted processing those quality values.","2021-02-26",5.2,0.78031,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":85,"severity":86,"isKev":18,"epssScore":124},"CVE-2022-21449","Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N).","2022-04-19",7.5,0.77151,{"cveId":126,"description":127,"publishedDate":105,"cvssScore":99,"cvssVersion":85,"severity":100,"isKev":18,"epssScore":128},"CVE-2019-12255","Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.",0.75081,{"cveId":130,"description":131,"publishedDate":105,"cvssScore":92,"cvssVersion":85,"severity":93,"isKev":18,"epssScore":132},"CVE-2019-12265","Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report.",0.59798,{"cveId":134,"description":135,"publishedDate":111,"cvssScore":123,"cvssVersion":85,"severity":86,"isKev":18,"epssScore":136},"CVE-2021-28165","In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.",0.53861,[138],{"cveId":139,"description":140,"publishedDate":141,"cvssScore":142,"severity":86,"isKev":4,"epssScore":143,"cisaVulnName":144,"cisaDateAdded":145,"cisaShortDescription":146,"cisaRequiredAction":147},"CVE-2019-13272","In the Linux kernel before 5.1.17, ptrace_link in kernel\u002Fptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.","2019-07-17",7.8,0.52199,"Linux Kernel Improper Privilege Management Vulnerability","2021-12-10","Kernel\u002Fptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.","Apply updates per vendor instructions.",{"title":149,"metaDescription":150,"keywords":151,"structuredData":152},"E-series Santricity Os Controller by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for E-series Santricity Os Controller by Netapp covering 20 versions with 242 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","E-series Santricity Os Controller vulnerabilities, E-series Santricity Os Controller security, E-series Santricity Os Controller CVE, Netapp E-series Santricity Os Controller, E-series Santricity Os Controller threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, E-series Santricity Os Controller KEV, E-series Santricity Os Controller exploited vulnerabilities",{"@context":153,"@type":154,"name":155,"description":150,"url":156,"manufacturer":157,"applicationCategory":161,"softwareVersion":162,"mainEntity":163},"https:\u002F\u002Fschema.org","SoftwareApplication","E-series Santricity Os Controller","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fe-series_santricity_os_controller",{"@type":158,"name":159,"url":160},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","20 versions tracked",{"@type":164,"name":165,"description":166,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","E-series Santricity Os Controller Security Vulnerabilities","Security vulnerabilities affecting E-series Santricity Os Controller by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":168,"apiVersion":169},"2026-10-17T10:40:17.749Z","3.0",[],{"rows":172,"total":11,"capped":18,"failed":17},[173],{"cveId":139,"name":144,"severity":86,"cvss":142,"added":145,"epss":143,"published":174,"ranges":175,"checked":4,"hits":177,"covers":18},"2019-07-17T13:15:10.687",[176],"11.0.0 to 11.60.3",[]]