Vulnerabilidades de netapp oncommand system manager (CVE)

Registros CVE publicados para netapp oncommand system manager, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
6.9Media
CVE-2020-11023 KEV

Potential XSS vulnerability in jQuery

jquery jQuery

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

85%EPSS
6.9Media
CVE-2020-11022

jQuery has a potential XSS vulnerability

jquery jQuery

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

99%EPSS
9.8Crítica
CVE-2020-1938 KEV

Apache Tomcat Improper Privilege Management Vulnerability

Apache Apache Tomcat

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an atta…

99%EPSS