Skip to contentNetapp Element vulnerabilities
- linux kernel, netapp active iq unified manager, bootstrap os +9 more +11 moreModerate: kernel-rt security and bug fix updateCVE-2021-3753Fix available4.7 Medium
- fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 moreThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...CVE-2021-3733Fix available6.5 Medium
- python, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...CVE-2021-3737Fix availableEPSS 13.2%7.5 High
- jhy jsoup, netapp management services for element software and netapp hci, oracle banking trade finance +13 more +15 moreCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptionsCVE-2021-37714Fix available7.5 High
- debian linux, linux kernel, netapp element software +3 more +5 morefs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering,...CVE-2021-38199Fix available6.5 Medium
- linux kernel, netapp element software, hci bootstrap os +2 more +4 morenet/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of...CVE-2021-38201Fix available7.5 High
- linux kernel, netapp element software, hci bootstrap os +3 more +5 morefs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial...CVE-2021-38202Fix available7.5 High
- linux kernel, netapp element software, hci bootstrap os +2 more +4 morebtrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock)...CVE-2021-38203Fix available5.5 Medium
- debian linux, linux kernel, netapp element software +4 more +6 moreIn drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can...CVE-2021-38160Fix availableDisputed7.8 High
- eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity os controller +16 more +18 moreEncoded URIs can access WEB-INF directory in Eclipse JettyCVE-2021-34429Public exploitFix availableEPSS 99.3%5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +14 more +16 moreSessionListener can prevent a session from being invalidated breaking logoutCVE-2021-34428Public exploitFix available2.9 Low
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2021-28169Fix availableEPSS 78.5%5.3 Medium
- vmware spring framework, netapp hci, management services for element software +29 more +31 moreImproper Privilege Management in Spring FrameworkCVE-2021-22118Fix available7.8 High
- eclipse jetty, the eclipse foundation eclipse jetty, netapp cloud manager +15 more +17 moreAuthorization Before Parsing and Canonicalization in jettyCVE-2021-28164Public exploitFix availableEPSS 82.4%5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache ignite +21 more +23 moreDirectory exposure in jettyCVE-2021-28163Fix available2.7 Low
- netapp element plug-in for vcenter server, management services for element software and netapp hci, solidfire \& hci management node +1 more +3 moreElement Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework...CVE-2021-269879.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty, apache nifi +14 more +16 moreDOS vulnerability for Quoted Quality CSV headersCVE-2020-27223Public exploitFix availableEPSS 78.0%5.2 Medium
- netapp element os, hci management node, hci storage node +1 more +3 moreElement OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow...CVE-2020-85849.8 Critical
- apache tomcat, debian linux, netapp element plug-in +9 more +11 moreApache Tomcat: Request header mix-up between HTTP/2 streamsCVE-2020-17527Public exploitFix availableEPSS 24.6%7.5 High
- linux kernel, netapp cloud backup, element software +4 more +6 moreAn issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5....CVE-2020-29368Fix available7.0 High
- netapp hci, element os +1 moreElement Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a...CVE-2020-85826.5 Medium
- netapp hci, element os +1 moreElement Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a...CVE-2020-85837.5 High
- ntp, fujitsu m10-1 firmware, m10-4 firmware +22 more +24 morentpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of...CVE-2020-13817Fix available5.9 Medium
- netapp element healthtools, element os +1 moreElement OS prior to version 12.0 and Element HealthTools prior to version 2020.04.01.04 are...CVE-2020-85727.5 High
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moregadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel through 5.6.13...CVE-2020-13143Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +22 more +24 moreThe VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled...CVE-2020-12888Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers...CVE-2020-12769Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request...CVE-2020-12770Fix available6.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreAn issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md...CVE-2020-12771Fix available5.5 Medium
- linux kernel, canonical ubuntu linux, debian linux +19 more +21 moreThere is a use-after-free in kernel versions before 5.5 due to a race condition between the...CVE-2020-10690Fix available6.5 Medium
- debian linux, linux kernel, netapp a700s firmware +19 more +21 moreAn issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in...CVE-2020-12653Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreIn the Linux kernel through 5.6.7 on the s390 platform, code execution may occur because of a...CVE-2020-11884Fix available7.0 High
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- debian linux, linux kernel, broadcom fabric operating system +15 more +17 moreAn issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is...CVE-2019-18683Public exploitFix available7.0 High
- libssh2, debian linux, fedoraproject fedora +10 more +12 moreIn libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer...CVE-2019-17498Public exploitFix available8.1 High
- sudo project sudo, canonical ubuntu linux, debian linux +12 more +14 moreIn Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain...CVE-2019-14287Public exploitFix availableEPSS 63.8%8.8 High
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moredrivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.8 has a NULL pointer...CVE-2019-15098Fix available4.6 Medium
- linux kernel, netapp active iq performance analytics services, active iq unified manager +3 more +5 moreAn issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers...CVE-2018-20855Fix available3.3 Low
- apache zookeeper, activemq, drill +7 more +9 moreAccess control bypass in Apache ZooKeeperCVE-2019-0201Fix available5.9 Medium
- netapp element plug-in for vcenter server, hyper converged infrastructure compute node +1 moreElement Plug-in for vCenter Server versions prior to 4.2.3 may disclose sensitive account...CVE-2019-54927.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +24 more +26 moreInstallation information leak in Eclipse JettyCVE-2019-10247Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, netapp element +23 more +25 moreInformation Exposure vulnerability in Eclipse JettyCVE-2019-10246Fix available5.3 Medium
- xmlsoft libxslt, canonical ubuntu linux, debian linux +19 more +21 moreNokogiri vulnerable to libxslt protection mechanism bypassCVE-2019-11068Fix available9.8 Critical
- linux kernel, netapp element software management node +1 moreThe hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows...CVE-2018-20449Fix available5.5 Medium
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- gnu binutils, canonical ubuntu linux, f5 traffix signaling delivery controller +1 more +3 moreAn issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in...CVE-2019-9077Fix available7.8 High
- gnu binutils, netapp element software management +1 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2019-90765.5 Medium
- gnu binutils, canonical ubuntu linux, f5 traffix signaling delivery controller +1 more +3 moreAn issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based...CVE-2019-9070Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreThe KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.CVE-2019-7222Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 moreThe KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.CVE-2019-7221Fix available7.8 High
- Show moreLoading…