Netapp Element Software Management Node — known CVE vulnerabilities

Every CVE whose affected-product data names Netapp Element Software Management Node, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2017-7657 — CVSS 9.8 (critical): In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance…
• CVE-2019-14287 — CVSS 8.8 (high): In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules…
• CVE-2018-3627 — CVSS 8.2 (high): Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access.
• CVE-2019-7221 — CVSS 7.8 (high): The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.
• CVE-2017-3135 — CVSS 7.5 (high): Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state…
• CVE-2018-20449 — CVSS 5.5 (medium): The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address…
• CVE-2019-5489 — CVSS 5.5 (medium): The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access…
• CVE-2019-7222 — CVSS 5.5 (medium): The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.
• CVE-2018-19985 — CVSS 4.6 (medium): The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and…