[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foc7oCz52VC90TG8b-DqQn11wguVwkd3jW935gCqV55s":3,"g5a-family:netapp\u002Fe-series_santricity_web_services":104,"g5a-ex:netapp\u002Fe-series_santricity_web_services@*":108},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":76,"seoMetadata":82,"meta":101},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"netapp","e-series_santricity_web_services",0,99,1,"2023-04-18",[],"E-series Santricity Web Services by Netapp is a technology product and 99 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,26,33,38,44,51,55,60,66,71],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":25},"CVE-2021-34429","For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and\u002For bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164\u002FGHSA-v7ff-8wcx-gmc5.","2021-07-15",5.3,"v3.1","Medium",false,0.99298,{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":22,"severity":31,"isKev":4,"epssScore":32},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.","2016-04-21",9.8,"Critical",0.92334,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":37},"CVE-2021-28164","In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to \u002Fcontext\u002F%2e\u002FWEB-INF\u002Fweb.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.","2021-04-01",0.82371,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":43},"CVE-2020-27223","In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU usage processing those quality values, resulting in minutes of CPU time exhausted processing those quality values.","2021-02-26",5.2,0.78031,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":22,"severity":49,"isKev":24,"epssScore":50},"CVE-2022-21449","Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N).","2022-04-19",7.5,"High",0.77151,{"cveId":52,"description":53,"publishedDate":36,"cvssScore":48,"cvssVersion":22,"severity":49,"isKev":24,"epssScore":54},"CVE-2021-28165","In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.",0.53861,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":30,"cvssVersion":22,"severity":31,"isKev":24,"epssScore":59},"CVE-2017-7658","In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP\u002F1.x configurations), and 9.4.x (all HTTP\u002F1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization.","2018-06-26",0.19362,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":22,"severity":49,"isKev":24,"epssScore":65},"CVE-2021-3517","There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.","2021-05-19",8.6,0.16986,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":70},"CVE-2017-10355","Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L).","2017-10-19",0.16181,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":75},"CVE-2021-35559","Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L).","2021-10-20",0.159,[77],{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"severity":31,"isKev":4,"epssScore":32,"cisaVulnName":78,"cisaDateAdded":79,"cisaShortDescription":80,"cisaRequiredAction":81},"Oracle Java SE and JRockit Unspecified Vulnerability","2023-05-12","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.","Apply updates per vendor instructions.",{"title":83,"metaDescription":84,"keywords":85,"structuredData":86},"E-series Santricity Web Services by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for E-series Santricity Web Services by Netapp with 99 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","E-series Santricity Web Services vulnerabilities, E-series Santricity Web Services security, E-series Santricity Web Services CVE, Netapp E-series Santricity Web Services, E-series Santricity Web Services threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, E-series Santricity Web Services KEV, E-series Santricity Web Services exploited vulnerabilities",{"@context":87,"@type":88,"name":89,"description":84,"url":90,"manufacturer":91,"applicationCategory":95,"softwareVersion":96,"mainEntity":97},"https:\u002F\u002Fschema.org","SoftwareApplication","E-series Santricity Web Services","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fe-series_santricity_web_services",{"@type":92,"name":93,"url":94},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":98,"name":99,"description":100,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","E-series Santricity Web Services Security Vulnerabilities","Security vulnerabilities affecting E-series Santricity Web Services by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":102,"apiVersion":103},"2026-10-17T12:11:16.999Z","3.0",[105],{"product":106,"cves":107},"e-series_santricity_web_services_proxy",34,{"rows":109,"total":11,"capped":24,"failed":9},[110],{"cveId":27,"name":78,"severity":31,"cvss":30,"added":79,"epss":32,"published":111,"ranges":112,"checked":4,"hits":113,"covers":24},"2016-04-21T11:00:21.667",[],[]]