Netapp Element vulnerabilities

• curl, netapp bootstrap os, element software +32 more +34 more netrc and default credential leak CVE-2025-0167 Fix available 3.4 LowFebruary 5, 2025
• netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 more Possible denial of service in X.509 name checks CVE-2024-6119 Fix available EPSS 66.6% 7.5 HighSeptember 3, 2024
• certifi, certifi python-certifi, netapp management services for element software and netapp hci +2 more +4 more Certifi removes GLOBALTRUST root certificate CVE-2024-39689 Public exploitFix available 7.5 HighJuly 5, 2024
• gnu glibc, debian linux, netapp element software +11 more +13 more nscd: netgroup cache assumes NSS callback uses in-buffer strings CVE-2024-33602 Fix available 7.4 HighApril 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +5 more +7 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. CVE-2024-26462 Fix available 5.5 MediumFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5... CVE-2024-26461 Fix available 7.5 HighFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. CVE-2024-26458 Fix available 5.3 MediumFebruary 26, 2024
• mit kerberos 5, debian linux, netapp active iq unified manager +4 more +6 more lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1... CVE-2023-36054 Fix available 6.5 MediumAugust 7, 2023
• certifi, certifi python-certifi, fedoraproject fedora +6 more +8 more Certifi's removal of e-Tugra root certificate CVE-2023-37920 Fix available 7.5 HighJuly 25, 2023
• openssl, netapp management services for element software and netapp hci, ontap select deploy administration utility +2 more AES-SIV implementation ignores empty associated data entries CVE-2023-2975 Fix available 5.3 MediumJuly 14, 2023
• openbsd openssh, netapp brocade fabric operating system, hci bootstrap os +4 more +6 more ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop... CVE-2023-28531 Fix available 9.8 CriticalMarch 17, 2023
• python, fedoraproject fedora, netapp active iq unified manager +6 more +8 more An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass... CVE-2023-24329 Public exploitFix available EPSS 20.5% 7.5 HighFebruary 17, 2023
• netapp altavault ost plug-in, fas\/aff baseboard management controller, hci baseboard management controller +4 more +6 more X.509 Policy Constraints Double Locking CVE-2022-3996 Fix available 7.5 HighDecember 13, 2022
• certifi, certifi python-certifi, netapp e-series performance analyzer +2 more +4 more Removal of TrustCor root certificate CVE-2022-23491 Fix available 6.8 MediumDecember 7, 2022
• python, fedoraproject fedora, netapp active iq unified manager +9 more +11 more An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one... CVE-2022-45061 Fix available 7.5 HighNovember 9, 2022
• fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 more Netlogon RPC Elevation of Privilege Vulnerability CVE-2022-38023 Fix available 8.1 HighNovember 9, 2022
• fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 more Windows Kerberos Elevation of Privilege Vulnerability CVE-2022-37967 Fix available 7.2 HighNovember 9, 2022
• fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 more Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability CVE-2022-37966 Fix available 8.1 HighNovember 9, 2022
• haxx curl, apple macos, debian linux +14 more +16 more When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using... CVE-2022-35252 Fix available 3.7 LowAugust 31, 2022
• jhy jsoup, netapp management services for element software, management services for netapp hci +1 more +3 more jsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled CVE-2022-36033 Fix available 6.1 MediumAugust 29, 2022
• zlib, apple ipados, iphone os +29 more +31 more zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c... CVE-2022-37434 Public exploitFix available EPSS 19.2% 9.8 CriticalAugust 5, 2022
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +5 more +7 more Jetty invalid URI parsing may produce invalid HttpURI.authority CVE-2022-2047 Fix available 2.7 LowJuly 7, 2022
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2022-2048 Fix available 7.5 HighJuly 7, 2022
• haxx curl, apple macos, debian linux +15 more +17 more When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures... CVE-2022-32208 Fix available 5.9 MediumJune 27, 2022
• haxx curl, apple macos, debian linux +15 more +17 more When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation... CVE-2022-32207 Fix available EPSS 12.3% 9.8 CriticalJune 27, 2022
• haxx curl, debian linux, fedoraproject fedora +20 more +22 more curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can... CVE-2022-32206 Fix available EPSS 36.3% 6.5 MediumJune 27, 2022
• haxx curl, apple macos, debian linux +20 more +22 more A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to... CVE-2022-32205 Fix available EPSS 31.5% 4.3 MediumJune 27, 2022
• openssl, broadcom sannav, debian linux +29 more +31 more The c_rehash script allows command injection CVE-2022-2068 Fix available EPSS 96.4% 7.3 HighJune 21, 2022
• linux kernel, netapp active iq unified manager, bootstrap os +14 more +16 more An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock... CVE-2022-1678 Fix available 5.9 MediumMay 25, 2022
• redis, fedoraproject fedora, netapp management services for element software +2 more +4 more A Malformed Lua script can crash Redis CVE-2022-24736 Fix available 3.3 LowApril 27, 2022
• redis, fedoraproject fedora, netapp management services for element software +2 more +4 more Lua scripts can be manipulated to overcome ACL rules in Redis CVE-2022-24735 Fix available 3.9 LowApril 27, 2022
• oracle graalvm, java se, azul zulu +14 more +16 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2022-21496 Fix available 5.3 MediumApril 19, 2022
• oracle graalvm, azul zulu, debian linux +15 more +17 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2022-21476 Fix available 7.5 HighApril 19, 2022
• oracle graalvm, java se, azul zulu +14 more +16 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2022-21443 Fix available 3.7 LowApril 19, 2022
• nokogiri, zlib, apple mac os x +28 more +30 more Nokogiri affected by zlib's Out-of-bounds Write vulnerability CVE-2018-25032 Public exploitFix available EPSS 51.7% 7.5 HighMarch 25, 2022
• python, fedoraproject fedora, netapp active iq unified manager +10 more +12 more A flaw was found in Python, specifically within the urllib.parse module. This module helps break... CVE-2022-0391 Fix available 7.5 HighFebruary 9, 2022
• linux kernel, netapp a700s firmware, active iq unified manager +13 more +15 more A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED... CVE-2021-4203 Fix available 6.8 MediumJanuary 22, 2022
• vmware spring framework, netapp active iq unified manager, management services for element software and netapp hci +5 more +7 more Improper Output Neutralization for Logs in Spring Framework CVE-2021-22096 Fix available 4.3 MediumOctober 28, 2021
• apache tomcat, debian linux, netapp hci +15 more +17 more DoS via memory leak with WebSocket connections CVE-2021-42340 Fix available EPSS 11.8% 7.5 HighOctober 14, 2021
• samba, debian linux, netapp management services for element software +2 more +4 more A null pointer de-reference was found in the way samba kerberos server handled missing sname in... CVE-2021-3671 Fix available 6.5 MediumOctober 12, 2021
• redis, debian linux, fedoraproject fedora +2 more +4 more Integer overflow issue with strings in Redis CVE-2021-41099 Fix available 7.5 HighOctober 4, 2021
• redis, debian linux, fedoraproject fedora +3 more +5 more Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms CVE-2021-32762 Fix available 7.5 HighOctober 4, 2021
• redis, debian linux, fedoraproject fedora +3 more +5 more Integer overflow issue with intsets in Redis CVE-2021-32687 Fix available 7.5 HighOctober 4, 2021
• redis, debian linux, fedoraproject fedora +3 more +5 more DoS vulnerability in Redis CVE-2021-32675 Public exploitFix available EPSS 16.1% 7.5 HighOctober 4, 2021
• redis, debian linux, fedoraproject fedora +5 more +7 more Vulnerability in Lua Debugger in Redis CVE-2021-32672 Fix available 5.3 MediumOctober 4, 2021
• redis, debian linux, fedoraproject fedora +3 more +5 more Integer overflow issue with Streams in Redis CVE-2021-32627 Fix available 7.5 HighOctober 4, 2021
• redis, debian linux, fedoraproject fedora +3 more +5 more Vulnerability in handling large ziplists CVE-2021-32628 Fix available EPSS 13.5% 7.5 HighOctober 4, 2021
• redis, debian linux, fedoraproject fedora +3 more +5 more Lua scripts can overflow the heap-based Lua stack in Redis CVE-2021-32626 Fix available EPSS 16.2% 7.5 HighOctober 4, 2021
• redis hiredis, debian linux, netapp management services for element software and netapp hci +2 more Integer Overflow to Buffer Overflow in Hiredis CVE-2021-32765 Fix available 8.8 HighOctober 4, 2021
• apache tomcat, debian linux, netapp management services for element software and netapp hci +2 more Apache Tomcat DoS with unexpected TLS packet CVE-2021-41079 Fix available 7.5 HighSeptember 16, 2021
• Show olderLoading…