Skip to contentNetapp vulnerabilities
Products
Show 140 moreShow less
Newest
- php, netapp clustered data ontap +1 moreIn PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers...CVE-2017-11147Fix available9.1 Critical
- netapp oncommand system managerNetApp OnCommand System Manager before 9.0 allows remote attackers to obtain sensitive...CVE-2016-50458.1 High
- netapp altavaultNetApp AltaVault 4.1 and earlier allows man-in-the-middle attackers to obtain sensitive...CVE-2016-39988.1 High
- netapp clustered data ontapNetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information,...CVE-2016-39977.5 High
- netapp data ontapNetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to...CVE-2016-34007.5 High
- apache http server, apple mac os x, debian linux +10 more +12 moreThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...CVE-2017-7668Fix availableEPSS 57.5%7.5 High
- apache http server, apple mac os x, debian linux +11 more +13 moreIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...CVE-2017-3167Fix availableEPSS 20.2%9.8 Critical
- netapp oncommand unified manager core packageNetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 might allow remote attackers to...CVE-2017-74397.5 High
- netapp oncommand unified manager core packageSQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1...CVE-2017-72367.5 High
- php, netapp clustered data ontap, storage automation store +2 moreThe i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a...CVE-2017-9119Fix available9.8 Critical
- debian linux, dropbear ssh project ssh, netapp h410c firmware +2 moreThe server in Dropbear before 2017.75 might allow post-authentication root remote code execution...CVE-2017-9078Fix available8.8 High
- apache log4j, netapp oncommand api services, oncommand insight +76 more +78 moreDeserialization of Untrusted Data in Log4jCVE-2017-5645Public exploitFix availableEPSS 89.4%9.8 Critical
- isc bind, bind 9, debian linux +3 more +5 morenamed exits with a REQUIRE assertion failure if it receives a null command string on its control channelCVE-2017-3138Fix available6.5 Medium
- isc bind, bind 9, debian linux +9 more +11 moreA response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAMECVE-2017-3137Fix available7.5 High
- isc bind, bind 9, debian linux +9 more +11 moreAn error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"CVE-2017-3136Fix availableEPSS 11.1%5.9 Medium
- netapp clustered data ontapNetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP...CVE-2017-73455.3 Medium
- netapp clustered data ontapNetApp Clustered Data ONTAP 8.1 through 9.1P1, when NFS or SMB is enabled, allows remote...CVE-2017-59887.5 High
- jqueryui jquery ui, debian linux, fedoraproject fedora +10 more +12 morejQuery-UI vulnerable to Cross-site Scripting in dialog closeTextCVE-2016-7103Fix availableEPSS 29.2%6.1 Medium
- apache tomcat, netapp oncommand insight, oncommand shift +2 moreApache Tomcat allows remote attackers to read data that was intended to be associated with a different requestCVE-2016-8747Fix available7.5 High
- apache struts, arubanetworks clearpass policy manager, hp server automation +6 more +8 moreApache Struts vulnerable to remote arbitrary command execution due to improper input validationCVE-2017-5638In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- netapp ontap select deploy administration utilityThe NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote...CVE-2017-59957.5 High
- netapp data ontapNetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted...CVE-2016-53748.8 High
- isc bind, bind 9, debian linux +8 more +10 moreCombination of DNS64 and RPZ Can Lead to CrashCVE-2017-3135Fix availableEPSS 17.1%7.5 High
- netapp oncommand unified manager for clustered data ontapNetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default...CVE-2016-66679.8 Critical
- netapp data ontapNetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain...CVE-2016-64955.9 Medium
- netapp virtual storage console for vmware vsphereNetApp Virtual Storage Console for VMware vSphere before 6.2.1 uses a non-unique certificate,...CVE-2016-57119.8 Critical
- netapp snap creator frameworkCross-site request forgery (CSRF) vulnerability in NetApp Snap Creator Framework before 4.3.0P1...CVE-2016-53726.3 Medium
- netapp clustered data ontapNetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share...CVE-2016-43417.5 High
- netapp oncommand system managerMultiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special...CVE-2016-30637.5 High
- netapp oncommand workflow automationNetApp OnCommand Workflow Automation before 3.1P2 allows remote attackers to bypass...CVE-2016-18948.1 High
- netapp snapcenter serverNetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication...CVE-2016-15027.3 High
- netapp snapdriveNetApp SnapDrive for Windows before 7.0.2P4, 7.0.3, and 7.1 before 7.1.3P1 allows remote...CVE-2015-85447.5 High
- netapp data ontapNetApp OnCommand System Manager 8.3.x before 8.3.2 allows remote authenticated users to execute...CVE-2015-83228.8 High
- netapp oncommand insightThe Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to...CVE-2017-56009.8 Critical
- canonical ubuntu linux, debian linux, littlecms little cms color engine +16 more +18 moreThe Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to...CVE-2016-10165Fix available7.1 High
- php, debian linux, netapp clustered data ontap +2 moreOff-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and...CVE-2016-10160Fix available9.8 Critical
- netapp metrocluster tiebreakerMetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive...CVE-2016-68207.5 High
- netapp clustered data ontapClustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which...CVE-2015-80203.7 Low
- php, netapp clustered data ontap +1 moreThe SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12...CVE-2016-7480EPSS 41.6%9.8 Critical
- php, netapp clustered data ontap +1 moreZend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that...CVE-2017-5340Fix availableEPSS 16.7%9.8 Critical
- isc bind, debian linux, netapp data ontap edge +9 more +11 morenamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...CVE-2016-9131Fix availableEPSS 40.6%7.5 High
- apache http server, debian linux, netapp clustered data ontap +8 more +10 moreApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...CVE-2016-8743Fix availableEPSS 13.3%7.5 High
- netapp snap creator frameworkNetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed...CVE-2016-71727.5 High
- zlib, apple iphone os, mac os x +21 more +23 moreThe crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have...CVE-2016-9843Fix available9.8 Critical
- zlib, apple iphone os, mac os x +37 more +39 moreinffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9841Fix available9.8 Critical
- netapp plug-inNetApp Plug-in for Symantec NetBackup prior to version 2.0.1 makes use of a non-unique server...CVE-2016-71715.6 Medium
- apache tomcat, canonical ubuntu linux, debian linux +16 more +18 moreApache Tomcat Improper Access Control vulnerabilityCVE-2016-8735In KEVFix availableEPSS 90.3%9.8 Critical
- isc bind, debian linux, netapp data ontap edge +8 more +10 morenamed in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1...CVE-2016-8864Fix availableEPSS 38.7%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreIncorrect Authorization in Apache TomcatCVE-2016-6797Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat vulnerable to SecurityManager bypassCVE-2016-6796Fix available7.5 High
- Show moreLoading…