Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Netapp

Netapp vulnerabilities

Products

Oncommand Insight975
Active Iq Unified Manager855
Oncommand Workflow Automation748
Snapcenter579
Cloud Backup349
H700s Firmware302
H300s Firmware301
H410s Firmware301
H500s Firmware301
H410c Firmware249
E-series Santricity Os Controller243
Steelstore Cloud Integrated Storage216
Solidfire192
Clustered Data Ontap189
Snapmanager188
Ontap Select Deploy Administration Utility185
Hci Management Node182
Oncommand Unified Manager169
H700e Firmware149
H300e Firmware148
H500e Firmware148
E-series Santricity Storage Manager140
Storage Automation Store113
Solidfire \& Hci Management Node104
Element Software100
E-series Santricity Web Services99
Oncommand Balance83
Santricity Unified Manager77
7-mode Transition Tool75
Storagegrid74
Oncommand Performance Manager73
Solidfire Baseboard Management Controller Firmware71
Virtual Storage Console70
H610s Firmware69
Plug-in For Symantec Netbackup69
Vasa Provider For Clustered Data Ontap69
Bootstrap Os64
Oncommand Shift64
Storage Replication Adapter For Clustered Data Ontap63
Data Availability Services61
E-series Performance Analyzer61
Cloud Secure Agent57
Cloud Insights Acquisition Unit53
Hci Compute Node51
H610c Firmware45
Solidfire\, Enterprise Sds \& Hci Storage Node43
Data Ontap42
H615c Firmware42
Snap Creator Framework42
Hci Baseboard Management Controller38
A700s Firmware37
E-series Santricity Web Services Proxy35
Hci Compute Node Firmware34
Solidfire Baseboard Management Controller34
Ontap Tools33
E-series Santricity Unified Manager30
Service Level Manager29
A250 Firmware28
E-series Santricity Management Plug-ins28
Hci Bootstrap Os28

Show 140 moreShow less

Newest

Known exploitedIn KEVPublic exploitFix available

oracle mysql, oracle corporation mysql server, debian linux +15 more +17 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2017-10268Fix available4.1 MediumOctober 18, 2017
apache struts, netapp oncommand balance +1 moreApache Struts forced double OGNL evaluationCVE-2016-4461Fix available8.8 HighOctober 16, 2017
linux kernel, netapp cloud backup, h300e firmware +6 more +8 moreInsufficient data validation in waitid allowed an user to escape sandboxes on Linux.CVE-2017-5123Public exploitFix available8.8 HighOctober 12, 2017
apache tomcat, canonical ubuntu linux, debian linux +55 more +57 moreUnrestricted Upload of File with Dangerous Type Apache TomcatCVE-2017-12617In KEVPublic exploitFix availableEPSS 100.0%8.1 HighOctober 3, 2017
apache tomcat, netapp 7-mode transition tool, oncommand balance +19 more +21 moreWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the serverCVE-2017-12615In KEVPublic exploitFix availableEPSS 99.7%8.1 HighSeptember 19, 2017
apache struts, cisco digital media manager, hosted collaboration solution +4 more +6 moreREST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filteringCVE-2017-9805In KEVPublic exploitFix availableEPSS 99.4%8.1 HighSeptember 15, 2017
netapp oncommand unified manager for clustered data ontapNetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure...CVE-2017-140537.5 HighSeptember 1, 2017
netapp clustered data ontapNetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data...CVE-2017-124237.7 HighSeptember 1, 2017
netapp clustered data ontapNetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute...CVE-2017-124218.8 HighSeptember 1, 2017
netapp data ontapNetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to...CVE-2016-18956.5 MediumSeptember 1, 2017
netapp data ontapNetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass...CVE-2015-77469.8 CriticalSeptember 1, 2017
netapp storagegrid webscaleNetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10...CVE-2017-124226.5 MediumAugust 29, 2017
netapp clustered data ontapHeap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3...CVE-2017-124208.8 HighAugust 18, 2017
netapp data ontapNetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote...CVE-2017-128595.9 MediumAugust 18, 2017
oracle mysql, oracle corporation mysql server, debian linux +15 more +17 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2017-10384Fix available6.5 MediumAugust 17, 2017
oracle mysql, debian linux, mariadb +14 more +16 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)....CVE-2017-10379Fix available6.5 MediumAugust 17, 2017
oracle mysql, mariadb, netapp active iq unified manager +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB)....CVE-2017-10286Fix available4.4 MediumAugust 17, 2017
fasterxml jackson-databind, debian linux, netapp oncommand balance +18 more +20 morejackson-databind is vulnerable to a deserialization flawCVE-2017-7525Public exploitFix availableEPSS 37.7%9.8 CriticalAugust 11, 2017
oracle corporation java, netapp active iq unified manager, cloud backup +16 more +18 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported...CVE-2017-101257.1 HighAugust 8, 2017
oracle corporation java, debian linux, netapp active iq unified manager +17 more +19 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported...CVE-2017-10114Fix available8.3 HighAugust 8, 2017
oracle corporation java, netapp active iq unified manager, cloud backup +21 more +23 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported...CVE-2017-101054.3 MediumAugust 8, 2017
oracle corporation java, debian linux, netapp active iq unified manager +17 more +19 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported...CVE-2017-10086Fix available9.6 CriticalAugust 8, 2017
netapp snapcenter serverNetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups.CVE-2015-78878.1 HighAugust 7, 2017
netapp oncommand api servicesNetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to...CVE-2017-89196.5 MediumJuly 25, 2017
oracle jrockit, oracle corporation java, debian linux +25 more +27 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10243Fix available6.5 MediumJuly 20, 2017
oracle jrockit, oracle corporation java, debian linux +25 more +27 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10198Fix available6.8 MediumJuly 20, 2017
oracle corporation java, debian linux, netapp active iq unified manager +23 more +25 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2017-10193Fix available3.1 LowJuly 20, 2017
oracle jrockit, oracle corporation java, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10176Fix available7.5 HighJuly 20, 2017
oracle jrockit, oracle corporation java, debian linux +25 more +27 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10135Fix available5.9 MediumJuly 20, 2017
oracle jrockit, oracle corporation java, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10118Fix available7.5 HighJuly 20, 2017
oracle jrockit, oracle corporation java, debian linux +26 more +28 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10116Fix available8.3 HighJuly 20, 2017
oracle jrockit, oracle corporation java, debian linux +26 more +28 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10115Fix available7.5 HighJuly 20, 2017
oracle corporation java, debian linux, netapp active iq unified manager +23 more +25 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2017-10111Fix available9.6 CriticalJuly 20, 2017
oracle corporation java, debian linux, netapp active iq unified manager +24 more +26 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions...CVE-2017-10110Fix available9.6 CriticalJuly 20, 2017
oracle jrockit, oracle corporation java, debian linux +25 more +27 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10109Fix available5.3 MediumJuly 20, 2017
oracle jrockit, oracle corporation java, debian linux +26 more +28 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10108Fix available5.3 MediumJuly 20, 2017
oracle corporation java, debian linux, netapp active iq unified manager +24 more +26 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....CVE-2017-10107Fix available9.6 CriticalJuly 20, 2017
oracle corporation java, debian linux, netapp active iq unified manager +25 more +27 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....CVE-2017-10102Fix available9.0 CriticalJuly 20, 2017
oracle corporation java, debian linux, netapp active iq unified manager +24 more +26 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP)....CVE-2017-10101Fix available9.6 CriticalJuly 20, 2017
oracle corporation java, debian linux, netapp active iq unified manager +24 more +26 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP)....CVE-2017-10096Fix available9.6 CriticalJuly 20, 2017
oracle corporation java, debian linux, netapp active iq unified manager +23 more +25 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2017-10090Fix available9.6 CriticalJuly 20, 2017
oracle corporation java, debian linux, netapp active iq unified manager +24 more +26 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported...CVE-2017-10089Fix available9.6 CriticalJuly 20, 2017
oracle corporation java, debian linux, netapp active iq unified manager +24 more +26 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2017-10087Fix available9.6 CriticalJuly 20, 2017
oracle corporation java, debian linux, netapp active iq unified manager +17 more +19 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...CVE-2017-10081Fix available4.3 MediumJuly 20, 2017
oracle corporation java, debian linux, netapp active iq unified manager +25 more +27 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported...CVE-2017-10078Fix available8.1 HighJuly 20, 2017
oracle corporation java, debian linux, netapp active iq unified manager +23 more +25 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...CVE-2017-10074Fix available8.3 HighJuly 20, 2017
oracle corporation java, debian linux, netapp active iq unified manager +24 more +26 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported...CVE-2017-10067Fix available7.5 HighJuly 20, 2017
oracle jrockit, oracle corporation java, debian linux +26 more +28 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10053Fix available5.3 MediumJuly 20, 2017
netapp clustered data ontapNetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to...CVE-2017-79476.5 MediumJuly 17, 2017
apache http server, apple mac os x, debian linux +12 more +14 moreIn Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-...CVE-2017-9788Fix availableEPSS 56.8%9.1 CriticalJuly 13, 2017
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open