NetApp Element Plug-in for vCenter Server
Approved changes feed: RSS · Atom
cpe:2.3:a:netapp:element_plug-in_for_vcenter_server:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Netapp (f19678f6-cb27-5a55-8852-34b249f80ef9) |
|---|---|
| Product | Element Plug In For Vcenter Server (3031009d-ce14-5beb-abd7-4bde1ce3fce5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-2048 |
vulnerable | 2026-06-08 05:42:50.148571 |
Details available
HIGH (7.5)
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.
Published: 2022-07-07T20:35:09.000Z
Updated: 2024-08-03T00:24:43.964Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2047 |
vulnerable | 2026-06-08 05:42:50.146617 |
Details available
LOW (2.7)
In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.
Published: 2022-07-07T20:45:12.000Z
Updated: 2024-08-03T00:24:44.138Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34429 |
vulnerable | 2026-06-08 05:32:13.353841 |
Details available
MEDIUM (5.3)
For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc5.
Published: 2021-07-15T17:00:10.000Z
Updated: 2024-08-04T00:12:50.169Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34428 |
vulnerable | 2026-06-08 05:32:13.345079 |
Details available
LOW (2.9)
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being invalidated. This can result in an application used on a shared computer being left logged in.
Published: 2021-06-22T14:45:11.000Z
Updated: 2024-08-04T00:12:50.169Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28164 |
vulnerable | 2026-06-08 05:31:23.070087 |
Details available
MEDIUM (5.3)
In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.
Published: 2021-04-01T14:20:14.000Z
Updated: 2024-08-03T21:40:12.093Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28163 |
vulnerable | 2026-06-08 05:31:23.047042 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27223 |
vulnerable | 2026-06-08 05:23:52.424579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.