Virtual Storage Console

Vendor:

First CVE: Apr 21, 2016 · Active for 10 years

70
Total CVEs
More Total CVEs than 98% of tracked products
11.7
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
7.0
Avg CVSS
Higher Avg CVSS than 42% of tracked products
1.4%
KEV Rate
Higher KEV Rate than 96% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Virtual Storage Console over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 21, 2016
10 years ago
Most Recent CVE
Apr 1, 2021
1,939 days ago

CVE Severity & Scoring

Virtual Storage Console70 CVEs
All CVEs352,101 CVEs
LowMediumHighCritical
Attack Vector
Local4 (5.7%)
Network65 (92.9%)
Unknown0 (0.0%)
Physical1 (1.4%)
Adjacent Network0 (0.0%)
Attack Complexity
Low43 (61.4%)
High27 (38.6%)
Unknown0 (0.0%)
User Interaction
None38 (54.3%)
Unknown0 (0.0%)
Required32 (45.7%)
Privileges Required
Low4 (5.7%)
High1 (1.4%)
None65 (92.9%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (70 CVEs).

70 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2016-3427CRITICAL
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and avai
Apr 21, 20169.895YESNO
CVE-2021-28164MEDIUM
In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources withi
Apr 1, 20215.386NOYES
CVE-2018-15473MEDIUM
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has be
Aug 17, 20185.386NOYES
CVE-2016-9841CRITICAL
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
May 23, 20179.835NONO
CVE-2018-6485CRITICAL
An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to retu
Feb 1, 20189.833NONO
CVE-2017-10309HIGH
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability
Oct 19, 20177.131NOYES
CVE-2017-10089CRITICAL
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulne
Aug 8, 20179.631NONO
CVE-2017-10355MEDIUM
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u14
Oct 19, 20175.330NOYES
CVE-2017-10107CRITICAL
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Em
Aug 8, 20179.630NONO
CVE-2019-11815HIGH
An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace clea
May 8, 20198.129NONO
View all 70 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (70 CVEs).

CISA KEV
1 CVE
1.4% of CVEs· 96th percentile
Metasploit
2 CVEs
2.9% of CVEs· 96th percentile
Nuclei
1 CVE
1.4% of CVEs· 96th percentile
ExploitDB
4 CVEs
5.7% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (70 CVEs).

Media Mentions

Signals from CVEs in this product scope (70 CVEs).

Top CNAs Publishing CVEs For Virtual Storage Console

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
9.717.00.4%00
9.625.33.7%00
6.2.256.72.9%00
6.0477.03.1%02