Bluexp vulnerabilities

6 known vulnerabilities in Bluexp from NetApp. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Protocol Buffers: Out-of-bounds Write

  CVE-2024-7254Sep 19, 2024GoogleEPSS 2.77%

  Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsPars

• 7.4 High severity

  Java SE JDK and JRE: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-21147Jul 16, 2024OracleEPSS 1.13%

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle

• 7.5 High severity

  squid: Uncontrolled Recursion

  CVE-2024-25111Mar 6, 2024Squid-cacheEPSS 65.3%

  Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of S

• 7.5 High severity

  jetty.project: Allocation of Resources Without Limits or Throttling

  CVE-2024-22201Feb 26, 2024JettyEPSS 1.43%

  Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors

• 7.5 High severity

  squid: Collapse of Data into Unsafe Value

  CVE-2024-25617Feb 14, 2024Squid-cacheEPSS 88.9%

  Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or

• 9.8 Critical severity

  Apache Commons Text: Improper Control of Generation of Code

  CVE-2022-42889Oct 13, 2022ApacheEPSS 99.9%

  Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringL