# Netapp E-Series Santricity Web Services


- [CVE-2016-3427](https://insights.sbomify.com/CVE-2016-3427/): Oracle Java SE and JRockit Unspecified (critical 9.8, exploited in the wild)
- [CVE-2017-7657](https://insights.sbomify.com/CVE-2017-7657/): Critical severity vulnerability that affects org.eclipse.jetty:jetty-server (critical 9.8)
- [CVE-2017-7658](https://insights.sbomify.com/CVE-2017-7658/): Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling) (critical 9.8)
- [CVE-2016-9841](https://insights.sbomify.com/CVE-2016-9841/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-10285](https://insights.sbomify.com/CVE-2017-10285/): Code injection in Java (critical 9.6)
- [CVE-2017-10346](https://insights.sbomify.com/CVE-2017-10346/): Code injection in Java (critical 9.6)
- [CVE-2021-3517](https://insights.sbomify.com/CVE-2021-3517/): Nokogiri contains libxml Out-of-bounds Write vulnerability (high 8.6)
- [CVE-2020-14583](https://insights.sbomify.com/CVE-2020-14583/): Other in Java (high 8.3)
- [CVE-2020-14664](https://insights.sbomify.com/CVE-2020-14664/): Code injection in Java (high 8.3)
- [CVE-2020-2803](https://insights.sbomify.com/CVE-2020-2803/): Other in Java (high 8.3)
- [CVE-2020-2805](https://insights.sbomify.com/CVE-2020-2805/): Other in Java (high 8.3)
- [CVE-2018-2825](https://insights.sbomify.com/CVE-2018-2825/): Code injection in Java (high 8.3)

---
From sbomify Insights: https://insights.sbomify.com/products/netapp/e-series-santricity-web-services/