# Netapp Cloud Insights Acquisition Unit


- [CVE-2023-41993](https://insights.sbomify.com/CVE-2023-41993/): Apple Multiple Products WebKit Code Execution (high 8.8, exploited in the wild)
- [CVE-2024-20932](https://insights.sbomify.com/CVE-2024-20932/): Security feature bypass in Java SE JDK and JRE (high 7.5)
- [CVE-2022-34169](https://insights.sbomify.com/CVE-2022-34169/): Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets (high 7.5)
- [CVE-2022-21476](https://insights.sbomify.com/CVE-2022-21476/): Information disclosure in Java SE JDK and JRE (high 7.5)
- [CVE-2020-36518](https://insights.sbomify.com/CVE-2020-36518/): Deeply nested json in jackson-databind (high 7.5)
- [CVE-2024-20918](https://insights.sbomify.com/CVE-2024-20918/): Security feature bypass in Java SE JDK and JRE (high 7.4)
- [CVE-2024-20952](https://insights.sbomify.com/CVE-2024-20952/): Use after free in Java SE JDK and JRE (high 7.4)
- [CVE-2023-21930](https://insights.sbomify.com/CVE-2023-21930/): Other in Java SE JDK and JRE (high 7.4)
- [CVE-2024-20926](https://insights.sbomify.com/CVE-2024-20926/): Deserialization in Java SE JDK and JRE (medium 5.9)
- [CVE-2023-21954](https://insights.sbomify.com/CVE-2023-21954/): Information disclosure in Java SE JDK and JRE (medium 5.9)
- [CVE-2023-21967](https://insights.sbomify.com/CVE-2023-21967/): Denial of service in Java SE JDK and JRE (medium 5.9)
- [CVE-2022-21541](https://insights.sbomify.com/CVE-2022-21541/): Other in Java SE JDK and JRE (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/products/netapp/cloud-insights-acquisition-unit/