Enterprise Manager for Storage Management vulnerabilitiesRanked by how likely they are to be used.
Enterprise Manager for Storage Management is made by Oracle. We track 7 published vulnerabilities in it, across 2 versions. None of them is on the list of flaws known to be exploited today. If you run Enterprise Manager for Storage Management, keep it on a version the vendor still supports.
We keep watching the known-exploited list.
Which Enterprise Manager for Storage Management vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Enterprise Manager for Storage Management's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Enterprise Manager for Storage Management flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 64%CVE-2021-3449Medium
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.
- 53%CVE-2020-1967High
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the...
- 51%CVE-2021-23840High
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform.
- 7.4%CVE-2021-23841Medium
The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate.
- 7.1%CVE-2020-1971Medium
The X.509 GeneralName type is a generic type for representing different types of names.
Running Enterprise Manager for Storage Management? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).
- Matched to
- Enterprise Manager for Storage Management on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 7 published vulnerabilities listed under the name Enterprise Manager for Storage Management, across 2 versions.
None of Enterprise Manager for Storage Management's vulnerabilities is on the list of flaws known to be exploited today.
Create a Precursor Intelligence account and track Enterprise Manager for Storage Management. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.