Skip to contentNetapp Management Services For Element Software And Netapp Hci vulnerabilities
- debian linux, netapp 500f firmware, 8300 firmware +27 more +29 moreTiming side-channel in ECDSA signature computationCVE-2024-13176Public exploitFix available4.6 Medium
- netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 morePossible denial of service in X.509 name checksCVE-2024-6119Fix availableEPSS 66.6%7.5 High
- certifi, certifi python-certifi, netapp management services for element software and netapp hci +2 more +4 moreCertifi removes GLOBALTRUST root certificateCVE-2024-39689Public exploitFix available7.5 High
- openssl, debian linux, netapp 500f firmware +40 more +42 moreSSL_select_next_proto buffer overreadCVE-2024-5535Public exploitFix available9.1 Critical
- openssl, debian linux, netapp 500f firmware +32 more +34 moreUse After Free with SSL_free_buffersCVE-2024-4741Fix available9.8 Critical
- openssl, netapp 500f firmware, 8300 firmware +19 more +21 moreExcessive time spent checking DSA keys and parametersCVE-2024-4603Fix available5.3 Medium
- mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +5 more +7 moreKerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.CVE-2024-26462Fix available5.5 Medium
- mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 moreKerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5...CVE-2024-26461Fix available7.5 High
- mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 moreKerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.CVE-2024-26458Fix available5.3 Medium
- openssl, netapp 500f firmware, 8300 firmware +31 more +33 moreExcessive time spent checking invalid RSA public keysCVE-2023-6237Fix available5.9 Medium
- openssl, netapp management services for element software and netapp hci, ontap select deploy administration utility +2 moreAES-SIV implementation ignores empty associated data entriesCVE-2023-2975Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +5 more +7 moreJetty invalid URI parsing may produce invalid HttpURI.authorityCVE-2022-2047Fix available2.7 Low
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreJetty vulnerable to Invalid HTTP/2 requests that can lead to denial of serviceCVE-2022-2048Fix available7.5 High
- vmware spring framework, netapp active iq unified manager, management services for element software and netapp hci +5 more +7 moreImproper Output Neutralization for Logs in Spring FrameworkCVE-2021-22096Fix available4.3 Medium
- redis, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow issue with strings in RedisCVE-2021-41099Fix available7.5 High
- redis hiredis, debian linux, netapp management services for element software and netapp hci +2 moreInteger Overflow to Buffer Overflow in HiredisCVE-2021-32765Fix available8.8 High
- apache tomcat, debian linux, netapp management services for element software and netapp hci +2 moreApache Tomcat DoS with unexpected TLS packetCVE-2021-41079Fix available7.5 High
- fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 moreThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...CVE-2021-3733Fix available6.5 Medium
- jhy jsoup, netapp management services for element software and netapp hci, oracle banking trade finance +13 more +15 moreCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptionsCVE-2021-37714Fix available7.5 High
- netapp element plug-in for vcenter server, management services for element software and netapp hci, solidfire \& hci management node +1 more +3 moreElement Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework...CVE-2021-269879.8 Critical
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium