Netapp Storagegrid vulnerabilities

• netapp storagegrid (formerly storagegrid webscale) CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2026-22060 6.9 MediumNovember 3, 2026
• netapp storagegrid (formerly storagegrid webscale) CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2026-22058 9.1 CriticalNovember 3, 2026
• netapp e-series santricity os controller software, ontap 9, storagegrid (formerly storagegrid webscale) +2 more CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products CVE-2026-22063 6.0 MediumOctober 27, 2026
• netapp storagegrid CVE-2026-22056 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2026-22056 2.3 LowAugust 28, 2026
• netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 more StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are... CVE-2026-22051 2.3 LowApril 20, 2026
• netapp storagegrid (formerly storagegrid webscale) StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single... CVE-2026-22048 7.1 HighFebruary 17, 2026
• netapp storagegrid CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2025-26517 5.4 MediumSeptember 19, 2025
• netapp storagegrid CVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2025-26516 5.3 MediumSeptember 19, 2025
• netapp storagegrid CVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2025-26515 7.5 HighSeptember 19, 2025
• netapp storagegrid CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2025-26514 6.4 MediumSeptember 19, 2025
• omniauth saml, onelogin ruby-saml, netapp storagegrid +2 more Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential) CVE-2025-25292 Fix available EPSS 65.1% 9.3 CriticalMarch 12, 2025
• omniauth saml, onelogin ruby-saml, netapp storagegrid +2 more ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential) CVE-2025-25291 Fix available EPSS 21.0% 9.3 CriticalMarch 12, 2025
• netapp storagegrid CVE-2024-21994 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2024-21994 4.3 MediumNovember 8, 2024
• netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 more CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2024-21988 5.3 MediumJune 14, 2024
• netapp storagegrid Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2024-21984 5.9 MediumFebruary 16, 2024
• netapp storagegrid Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2024-21983 6.5 MediumFebruary 16, 2024
• netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 more Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2023-27318 6.5 MediumFebruary 5, 2024
• netapp storagegrid StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0.8 are susceptible to a... CVE-2022-38734 7.5 HighMarch 2, 2023
• netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 more Linux deployments of StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.2... CVE-2022-23238 6.5 MediumAugust 9, 2022
• zlib, apple ipados, iphone os +29 more +31 more zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c... CVE-2022-37434 Public exploitFix available EPSS 19.2% 9.8 CriticalAugust 5, 2022
• linux kernel, netapp active iq unified manager, bootstrap os +14 more +16 more An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock... CVE-2022-1678 Fix available 5.9 MediumMay 25, 2022
• openssl, debian linux, fedoraproject fedora +470 more +472 more Infinite loop in BN_mod_sqrt() reachable when parsing certificates CVE-2022-0778 Public exploitFix available EPSS 73.2% 7.5 HighMarch 15, 2022
• netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 more StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a... CVE-2022-23233 7.5 HighMarch 4, 2022
• netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 more StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a... CVE-2022-23232 4.9 MediumMarch 4, 2022
• golang go, netapp beegfs csi driver, cloud insights telegraf agent +2 more +4 more cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely... CVE-2022-23773 Public exploitFix available 7.5 HighFebruary 11, 2022
• golang go, debian linux, netapp beegfs csi driver +3 more +5 more Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can... CVE-2022-23772 Fix available 7.5 HighFebruary 11, 2022
• golang go, debian linux, netapp beegfs csi driver +3 more +5 more Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly... CVE-2022-23806 Fix available 9.1 CriticalFebruary 11, 2022
• netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 more StorageGRID (formerly StorageGRID Webscale) versions 11.5 prior to 11.5.0.5 are susceptible to a... CVE-2021-27006 4.4 MediumDecember 23, 2021
• apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 more mod_proxy SSRF CVE-2021-40438 In KEVPublic exploitFix available EPSS 100.0% 9.0 CriticalSeptember 16, 2021
• apache http server, debian linux, fedoraproject fedora +7 more +9 more ap_escape_quotes buffer overflow CVE-2021-39275 Fix available EPSS 39.4% 9.8 CriticalSeptember 16, 2021
• apache http server, broadcom brocade fabric operating system firmware, debian linux +9 more +11 more mod_proxy_uwsgi out of bound read CVE-2021-36160 Fix available EPSS 63.7% 7.5 HighSeptember 16, 2021
• apache http server, broadcom brocade fabric operating system firmware, debian linux +14 more +16 more NULL pointer dereference in httpd core CVE-2021-34798 Fix available EPSS 64.5% 7.5 HighSeptember 16, 2021
• golang go, fedoraproject fedora, netapp cloud insights telegraf +3 more +5 more The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key... CVE-2021-34558 Public exploitFix available 6.5 MediumJuly 15, 2021
• openssl, fedoraproject fedora, freebsd +30 more +32 more CA certificate check bypass with X509_V_FLAG_X509_STRICT CVE-2021-3450 Public exploitFix available EPSS 18.3% 7.4 HighMarch 25, 2021
• openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 more NULL pointer deref in signature_algorithms processing CVE-2021-3449 Public exploitFix available EPSS 63.5% 5.9 MediumMarch 25, 2021
• golang go, debian linux, fedoraproject fedora +2 more +4 more In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect... CVE-2021-3114 Fix available 6.5 MediumJanuary 26, 2021
• golang go, fedoraproject fedora, netapp cloud insights telegraf agent +1 more +3 more Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and... CVE-2021-3115 Fix available 7.5 HighJanuary 26, 2021
• debian linux, linux kernel, canonical ubuntu linux +12 more +14 more The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain... CVE-2020-16166 Fix available 3.7 LowJuly 30, 2020
• oracle corporation java, netapp 7-mode transition tool, active iq unified manager +13 more +15 more Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version... CVE-2020-14664 Fix available 8.3 HighJuly 15, 2020
• oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).... CVE-2020-14593 Fix available 7.4 HighJuly 14, 2020
• oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).... CVE-2020-14583 Fix available 8.3 HighJuly 14, 2020
• oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).... CVE-2020-14581 Fix available 3.7 LowJuly 14, 2020
• oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).... CVE-2020-14579 Fix available 3.7 LowJuly 14, 2020
• oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).... CVE-2020-14578 Fix available 3.7 LowJuly 14, 2020
• oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE).... CVE-2020-14577 Fix available 3.7 LowJuly 14, 2020
• oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).... CVE-2020-14556 Fix available 4.8 MediumJuly 14, 2020
• oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency)... CVE-2020-2830 Fix available 5.3 MediumApril 15, 2020
• oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 more Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that... CVE-2020-2816 Fix available 7.5 HighApril 15, 2020
• oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).... CVE-2020-2805 Fix available 8.3 HighApril 15, 2020
• oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).... CVE-2020-2803 Fix available 8.3 HighApril 15, 2020
• Show olderLoading…