Netapp Active Iq vulnerabilities

• netapp active iq onecollect Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an... CVE-2026-22055 5.3 MediumJune 3, 2026
• netapp active iq config advisor Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an... CVE-2026-22054 5.3 MediumJune 3, 2026
• oracle mysql client, netapp active iq unified manager, snapcenter +1 more +3 more Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). ... CVE-2025-30722 Fix available 5.3 MediumApril 15, 2025
• apache poi, netapp active iq unified manager +1 more Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names CVE-2025-31672 Fix available 5.3 MediumApril 9, 2025
• openbsd openssh, debian linux, netapp active iq unified manager +15 more +17 more Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled CVE-2025-26465 Public exploitFix available 6.8 MediumFebruary 18, 2025
• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in... CVE-2025-24928 Fix available 7.8 HighFebruary 18, 2025
• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in... CVE-2024-56171 Fix available 7.8 HighFebruary 18, 2025
• gnu binutils, netapp active iq unified manager, ontap select deploy administration utility +2 more GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption CVE-2025-1181 Fix available 2.3 LowFebruary 11, 2025
• gnu binutils, netapp active iq unified manager, ontap select deploy administration utility +2 more GNU Binutils ld libbfd.c bfd_putl64 memory corruption CVE-2025-1178 Fix available 6.3 MediumFebruary 11, 2025
• 7-zip, netapp active iq unified manager +1 more 7-Zip Mark-of-the-Web Bypass Vulnerability CVE-2025-0411 In KEVPublic exploit EPSS 47.6% 7.0 HighJanuary 25, 2025
• oracle graalvm, graalvm for jdk, jdk +9 more +11 more Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... CVE-2025-21502 Fix available 4.8 MediumJanuary 21, 2025
• oracle mysql server, netapp active iq unified manager, oncommand insight +1 more +3 more Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... CVE-2025-21492 Fix available 4.9 MediumJanuary 21, 2025
• gnome glib, debian linux, netapp active iq unified manager +31 more +33 more gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer... CVE-2024-52533 Fix available 9.8 CriticalNovember 11, 2024
• libexpat project libexpat, debian linux, netapp active iq unified manager +26 more +28 more An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser... CVE-2024-50602 Public exploitFix available 5.9 MediumOctober 27, 2024
• apache commons io, netapp active iq unified manager, bluexp +5 more +7 more Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader CVE-2024-47554 Fix available 4.3 MediumOctober 3, 2024
• apache avro, apache software foundation avro java sdk, netapp active iq unified manager +1 more +3 more Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK) CVE-2024-47561 Fix available 9.2 CriticalOctober 3, 2024
• google protobuf, protocol buffers, google-protobuf [jruby gem] +8 more +10 more Stack overflow in Protocol Buffers Java Lite CVE-2024-7254 Fix available 8.7 HighSeptember 19, 2024
• curl, debian linux, netapp active iq unified manager +26 more +28 more OCSP stapling bypass with GnuTLS CVE-2024-8096 Fix available 6.5 MediumSeptember 11, 2024
• netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 more Possible denial of service in X.509 name checks CVE-2024-6119 Fix available EPSS 66.6% 7.5 HighSeptember 3, 2024
• spring framework, vmware spring framework, netapp active iq unified manager +1 more +3 more CVE-2024-38808: Spring Expression DoS Vulnerability CVE-2024-38808 Fix available 4.3 MediumAugust 20, 2024
• oracle graalvm, graalvm enterprise edition, graalvm for jdk +10 more +12 more Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... CVE-2024-21147 Fix available 7.4 HighJuly 16, 2024
• oracle graalvm, graalvm for jdk, java se +9 more +11 more Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... CVE-2024-21140 Fix available 4.8 MediumJuly 16, 2024
• oracle graalvm, graalvm for jdk, jdk +7 more +9 more Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... CVE-2024-21138 Fix available 3.7 LowJuly 16, 2024
• oracle graalvm, graalvm for jdk, jdk +7 more +9 more Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... CVE-2024-21131 Fix available 3.7 LowJuly 16, 2024
• openbsd openssh, almalinux, amazon linux +71 more +73 more Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6387 Public exploitFix available EPSS 99.5% 8.1 HighJuly 1, 2024
• python urllib3, debian linux, netapp active iq unified manager +2 more Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 CVE-2024-37891 Fix available 4.4 MediumJune 17, 2024
• bouncycastle bouncy castle for java, netapp active iq unified manager, bluexp +2 more +4 more Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") CVE-2024-30171 Fix available 5.9 MediumMay 7, 2024
• gnu glibc, debian linux, netapp active iq unified manager +12 more +14 more nscd: Null pointer crashes after notfound response CVE-2024-33600 Fix available 5.9 MediumApril 26, 2024
• debian linux, gnu glibc, netapp active iq unified manager +13 more +15 more The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer... CVE-2024-2961 Public exploitFix available EPSS 88.3% 7.3 HighApril 17, 2024
• oracle mysql, oracle corporation mysql server, netapp active iq unified manager +4 more +6 more Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). ... CVE-2024-21102 Fix available 4.9 MediumApril 16, 2024
• oracle mysql, netapp active iq unified manager, oncommand insight +3 more +5 more Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). ... CVE-2024-21101 2.2 LowApril 16, 2024
• oracle mysql, oracle corporation mysql server, debian linux +5 more +7 more Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). ... CVE-2024-21096 Fix available 4.9 MediumApril 16, 2024
• oracle graalvm, graalvm for jdk, jdk +8 more +10 more Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... CVE-2024-21094 Fix available 3.7 LowApril 16, 2024
• oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 more Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication... CVE-2024-21087 Fix available 4.9 MediumApril 16, 2024
• oracle graalvm, debian linux, netapp active iq unified manager +7 more +9 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2024-21085 Fix available 3.7 LowApril 16, 2024
• oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 more Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported... CVE-2024-21069 Fix available 4.9 MediumApril 16, 2024
• oracle graalvm, graalvm for jdk, jdk +8 more +10 more Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... CVE-2024-21068 Fix available 3.7 LowApril 16, 2024
• oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 more Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... CVE-2024-21062 Fix available 4.9 MediumApril 16, 2024
• oracle mysql server, netapp active iq unified manager, oncommand insight +2 more +4 more Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). ... CVE-2024-21060 Fix available 4.9 MediumApril 16, 2024
• oracle mysql server, netapp active iq unified manager, oncommand insight +2 more +4 more Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... CVE-2024-21054 Fix available 4.9 MediumApril 16, 2024
• oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 more Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported... CVE-2024-21047 Fix available 4.9 MediumApril 16, 2024
• oracle mysql server, netapp active iq unified manager, oncommand insight +2 more +4 more Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported... CVE-2024-21015 Fix available 5.5 MediumApril 16, 2024
• oracle mysql server, netapp active iq unified manager, oncommand insight +2 more +4 more Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... CVE-2024-21013 Fix available 4.4 MediumApril 16, 2024
• oracle graalvm, graalvm for jdk, jdk +8 more +10 more Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... CVE-2024-21012 Fix available 3.7 LowApril 16, 2024
• oracle graalvm, graalvm for jdk, jdk +8 more +10 more Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... CVE-2024-21011 Fix available 3.7 LowApril 16, 2024
• oracle mysql server, netapp active iq unified manager, oncommand insight +2 more +4 more Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... CVE-2024-21009 Fix available 4.9 MediumApril 16, 2024
• oracle mysql server, netapp active iq unified manager, oncommand insight +2 more +4 more Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... CVE-2024-21008 Fix available 4.4 MediumApril 16, 2024
• oracle graalvm, netapp active iq unified manager, data infrastructure insights acquisition unit +6 more +8 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2024-21005 Fix available 3.1 LowApril 16, 2024
• oracle graalvm, netapp active iq unified manager, data infrastructure insights acquisition unit +6 more +8 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2024-21004 Fix available 2.5 LowApril 16, 2024
• oracle graalvm, netapp active iq unified manager, data infrastructure insights acquisition unit +6 more +8 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2024-21003 Fix available 3.1 LowApril 16, 2024
• Show olderLoading…