Data Availability Services vulnerabilities

2 known vulnerabilities in Data Availability Services from NetApp. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Apache Tomcat Improper Privilege Management Exploited

  CVE-2020-1938Feb 24, 2020ApacheEPSS 99.3%

  When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attac

• 7.8 High severity

  Android Kernel Use-After-Free Exploited

  CVE-2019-2215Oct 11, 2019AndroidEPSS 72.1%

  A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or