Netapp Management Services For Element Software vulnerabilities

• netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 more Possible denial of service in X.509 name checks CVE-2024-6119 Fix available EPSS 66.6% 7.5 HighSeptember 3, 2024
• certifi, certifi python-certifi, netapp management services for element software and netapp hci +2 more +4 more Certifi removes GLOBALTRUST root certificate CVE-2024-39689 Public exploitFix available 7.5 HighJuly 5, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +5 more +7 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. CVE-2024-26462 Fix available 5.5 MediumFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5... CVE-2024-26461 Fix available 7.5 HighFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. CVE-2024-26458 Fix available 5.3 MediumFebruary 26, 2024
• mit kerberos 5, debian linux, netapp active iq unified manager +4 more +6 more lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1... CVE-2023-36054 Fix available 6.5 MediumAugust 7, 2023
• certifi, certifi python-certifi, fedoraproject fedora +6 more +8 more Certifi's removal of e-Tugra root certificate CVE-2023-37920 Fix available 7.5 HighJuly 25, 2023
• openssl, netapp management services for element software and netapp hci, ontap select deploy administration utility +2 more AES-SIV implementation ignores empty associated data entries CVE-2023-2975 Fix available 5.3 MediumJuly 14, 2023
• python, fedoraproject fedora, netapp active iq unified manager +6 more +8 more An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass... CVE-2023-24329 Public exploitFix available EPSS 20.5% 7.5 HighFebruary 17, 2023
• netapp altavault ost plug-in, fas\/aff baseboard management controller, hci baseboard management controller +4 more +6 more X.509 Policy Constraints Double Locking CVE-2022-3996 Fix available 7.5 HighDecember 13, 2022
• certifi, certifi python-certifi, netapp e-series performance analyzer +2 more +4 more Removal of TrustCor root certificate CVE-2022-23491 Fix available 6.8 MediumDecember 7, 2022
• python, fedoraproject fedora, netapp active iq unified manager +9 more +11 more An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one... CVE-2022-45061 Fix available 7.5 HighNovember 9, 2022
• fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 more Netlogon RPC Elevation of Privilege Vulnerability CVE-2022-38023 Fix available 8.1 HighNovember 9, 2022
• fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 more Windows Kerberos Elevation of Privilege Vulnerability CVE-2022-37967 Fix available 7.2 HighNovember 9, 2022
• fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 more Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability CVE-2022-37966 Fix available 8.1 HighNovember 9, 2022
• jhy jsoup, netapp management services for element software, management services for netapp hci +1 more +3 more jsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled CVE-2022-36033 Fix available 6.1 MediumAugust 29, 2022
• zlib, apple ipados, iphone os +29 more +31 more zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c... CVE-2022-37434 Public exploitFix available EPSS 19.2% 9.8 CriticalAugust 5, 2022
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +5 more +7 more Jetty invalid URI parsing may produce invalid HttpURI.authority CVE-2022-2047 Fix available 2.7 LowJuly 7, 2022
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2022-2048 Fix available 7.5 HighJuly 7, 2022
• redis, fedoraproject fedora, netapp management services for element software +2 more +4 more A Malformed Lua script can crash Redis CVE-2022-24736 Fix available 3.3 LowApril 27, 2022
• redis, fedoraproject fedora, netapp management services for element software +2 more +4 more Lua scripts can be manipulated to overcome ACL rules in Redis CVE-2022-24735 Fix available 3.9 LowApril 27, 2022
• nokogiri, zlib, apple mac os x +28 more +30 more Nokogiri affected by zlib's Out-of-bounds Write vulnerability CVE-2018-25032 Public exploitFix available EPSS 51.7% 7.5 HighMarch 25, 2022
• python, fedoraproject fedora, netapp active iq unified manager +10 more +12 more A flaw was found in Python, specifically within the urllib.parse module. This module helps break... CVE-2022-0391 Fix available 7.5 HighFebruary 9, 2022
• vmware spring framework, netapp active iq unified manager, management services for element software and netapp hci +5 more +7 more Improper Output Neutralization for Logs in Spring Framework CVE-2021-22096 Fix available 4.3 MediumOctober 28, 2021
• apache tomcat, debian linux, netapp hci +15 more +17 more DoS via memory leak with WebSocket connections CVE-2021-42340 Fix available EPSS 11.8% 7.5 HighOctober 14, 2021
• samba, debian linux, netapp management services for element software +2 more +4 more A null pointer de-reference was found in the way samba kerberos server handled missing sname in... CVE-2021-3671 Fix available 6.5 MediumOctober 12, 2021
• redis, debian linux, fedoraproject fedora +2 more +4 more Integer overflow issue with strings in Redis CVE-2021-41099 Fix available 7.5 HighOctober 4, 2021
• redis, debian linux, fedoraproject fedora +3 more +5 more Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms CVE-2021-32762 Fix available 7.5 HighOctober 4, 2021
• redis, debian linux, fedoraproject fedora +3 more +5 more Integer overflow issue with intsets in Redis CVE-2021-32687 Fix available 7.5 HighOctober 4, 2021
• redis, debian linux, fedoraproject fedora +3 more +5 more DoS vulnerability in Redis CVE-2021-32675 Public exploitFix available EPSS 16.1% 7.5 HighOctober 4, 2021
• redis, debian linux, fedoraproject fedora +5 more +7 more Vulnerability in Lua Debugger in Redis CVE-2021-32672 Fix available 5.3 MediumOctober 4, 2021
• redis, debian linux, fedoraproject fedora +3 more +5 more Integer overflow issue with Streams in Redis CVE-2021-32627 Fix available 7.5 HighOctober 4, 2021
• redis, debian linux, fedoraproject fedora +3 more +5 more Vulnerability in handling large ziplists CVE-2021-32628 Fix available EPSS 13.0% 7.5 HighOctober 4, 2021
• redis, debian linux, fedoraproject fedora +3 more +5 more Lua scripts can overflow the heap-based Lua stack in Redis CVE-2021-32626 Fix available EPSS 15.6% 7.5 HighOctober 4, 2021
• redis hiredis, debian linux, netapp management services for element software and netapp hci +2 more Integer Overflow to Buffer Overflow in Hiredis CVE-2021-32765 Fix available 8.8 HighOctober 4, 2021
• apache tomcat, debian linux, netapp management services for element software and netapp hci +2 more Apache Tomcat DoS with unexpected TLS packet CVE-2021-41079 Fix available 7.5 HighSeptember 16, 2021
• fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 more There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious... CVE-2021-3733 Fix available 6.5 MediumSeptember 2, 2021
• python, canonical ubuntu linux, fedoraproject fedora +17 more +19 more A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python... CVE-2021-3737 Fix available EPSS 13.2% 7.5 HighAugust 31, 2021
• jhy jsoup, netapp management services for element software and netapp hci, oracle banking trade finance +13 more +15 more Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions CVE-2021-37714 Fix available 7.5 HighAugust 18, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2021-28169 Fix available EPSS 78.5% 5.3 MediumJune 9, 2021
• vmware spring framework, netapp hci, management services for element software +29 more +31 more Improper Privilege Management in Spring Framework CVE-2021-22118 Fix available 7.8 HighMay 27, 2021
• netapp element plug-in for vcenter server, management services for element software and netapp hci, solidfire \& hci management node +1 more +3 more Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework... CVE-2021-26987 9.8 CriticalMarch 15, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, apache nifi +14 more +16 more DOS vulnerability for Quoted Quality CSV headers CVE-2020-27223 Public exploitFix available EPSS 78.0% 5.2 MediumFebruary 26, 2021
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019