Skip to contentNetapp vulnerabilities
Products
Show 140 moreShow less
Newest
- sudo project sudo, netapp active iq unified manager +1 moreSudo before 1.9.13 does not escape control characters in log messages.CVE-2023-28486Fix available5.3 Medium
- debian linux, linux kernel, netapp h300s +4 more +6 moredo_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call,...CVE-2023-28466Fix available7.0 High
- netapp storagegridStorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0.8 are susceptible to a...CVE-2022-387347.5 High
- netapp active iq unified managerActive IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9...CVE-2022-232406.5 Medium
- netapp active iq unified managerActive IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9...CVE-2022-232394.8 Medium
- linux kernel, netapp hci baseboard management controller, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreIn the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.CVE-2023-26607Public exploitFix available7.1 High
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreIn the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an...CVE-2023-26545Fix available4.7 Medium
- python, fedoraproject fedora, netapp active iq unified manager +6 more +8 moreAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...CVE-2023-24329Public exploitFix availableEPSS 20.5%7.5 High
- red hat resteasy, netapp active iq unified manager, oncommand workflow automation +2 moreInsecure Temporary File in RESTEasyCVE-2023-0482Public exploitFix available5.5 Medium
- haxx curl, debian linux, fedoraproject fedora +9 more +11 moreAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...CVE-2023-23916Fix available6.5 Medium
- haxx curl, netapp active iq unified manager, clustered data ontap +8 more +10 moreA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...CVE-2023-23915Fix available6.5 Medium
- haxx curl, netapp active iq unified manager, clustered data ontap +8 more +10 moreA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...CVE-2023-23914Fix available9.1 Critical
- gnu gnutls, debian linux, fedoraproject fedora +7 more +9 moreA timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS....CVE-2023-0361Fix available7.4 High
- openbsd openssh, fedoraproject fedora, netapp 500f firmware +6 more +8 moreOpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms...CVE-2023-25136Public exploitFix availableEPSS 89.8%6.5 Medium
- debian linux, linux kernel, netapp active iq unified manager +5 more +7 moreIncorrect indirect branch prediction barrier in the Linux KernelCVE-2023-0045Public exploitFix available4.7 Medium
- ami megarac spx-12, megarac spx-13, megarac sp-x +2 more +4 morePassword reset interception via APICVE-2022-268728.3 High
- debian linux, linux kernel, netapp hci baseboard management controller +1 more +3 moreIn rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there...CVE-2023-23559Fix available7.8 High
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreThere exists a use-after-free vulnerability in the Linux kernel through io_uring and the...CVE-2022-4696Fix available7.8 High
- vim, vim vim/vim, apple macos +3 more +5 moreOut-of-bounds Read in vim/vimCVE-2023-0049Fix available7.3 High
- haxx curl, fedoraproject fedora, netapp active iq unified manager +7 more +9 moreA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...CVE-2022-43551Fix availableEPSS 16.6%7.5 High
- netapp oncommand insightOnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass...CVE-2022-387338.6 High
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreAn issue was discovered in the Linux kernel before 6.0.11. Missing validation of...CVE-2022-47521Fix available7.8 High
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreAn issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers...CVE-2022-47520Fix available7.1 High
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreAn issue was discovered in the Linux kernel before 6.0.11. Missing validation of...CVE-2022-47519Fix available7.8 High
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreAn issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of...CVE-2022-47518Fix available7.8 High
- netapp altavault ost plug-in, fas\/aff baseboard management controller, hci baseboard management controller +4 more +6 moreX.509 Policy Constraints Double LockingCVE-2022-3996Fix available7.5 High
- linux kernel, netapp hci baseboard management controller +1 moreA flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is...CVE-2022-41858Fix available7.1 High
- certifi, certifi python-certifi, netapp e-series performance analyzer +2 more +4 moreRemoval of TrustCor root certificateCVE-2022-23491Fix available6.8 Medium
- vim, vim vim/vim, netapp ontap select deploy administration utility +2 moreUse After Free in vim/vimCVE-2022-4292Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreAn issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth...CVE-2022-45934Public exploitFix available7.8 High
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreAn issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core...CVE-2022-45919Fix available7.0 High
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreAn issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a...CVE-2022-45888Fix available6.4 Medium
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreAn issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec...CVE-2022-45887Fix available4.7 Medium
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreAn issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a...CVE-2022-45886Fix available7.0 High
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreAn issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c...CVE-2022-45885Fix available7.0 High
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreAn issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a...CVE-2022-45884Fix available7.0 High
- libtiff, apple ipados, iphone os +4 more +6 moreLibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflowCVE-2022-3970Fix available6.3 Medium
- python, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...CVE-2022-45061Fix available7.5 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreNetlogon RPC Elevation of Privilege VulnerabilityCVE-2022-38023Fix available8.1 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreWindows Kerberos Elevation of Privilege VulnerabilityCVE-2022-37967Fix available7.2 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreWindows Kerberos RC4-HMAC Elevation of Privilege VulnerabilityCVE-2022-37966Fix available8.1 High
- net-snmp, debian linux, netapp h300s firmware +3 more +5 morehandle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has...CVE-2022-44793Fix availableEPSS 53.5%6.5 Medium
- net-snmp, debian linux, netapp h300s firmware +3 more +5 morehandle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a...CVE-2022-44792Fix availableEPSS 52.1%6.5 Medium
- linux kernel, netapp active iq unified manager, h300s firmware +5 more +7 moreThe Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer...CVE-2022-43945Fix available7.5 High
- openssl, fedoraproject fedora, netapp clustered data ontap +10 more +12 moreX.509 Email Address 4-byte Buffer OverflowCVE-2022-3602Public exploitFix availableEPSS 90.8%7.5 High
- vmware spring security, netapp active iq unified manager +1 moreSpring Security authorization rules can be bypassed via forward or include dispatcher typesCVE-2022-31692Public exploitFix available9.8 Critical
- spring security, vmware spring security, netapp active iq unified manager +2 morespring-security-oauth2-client vulnerable to Privilege EscalationCVE-2022-31690Fix available8.1 High
- haxx curl, apple macos, netapp clustered data ontap +8 more +10 morecurl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095...CVE-2022-35260Fix available6.5 Medium
- haxx curl, apple macos, fedoraproject fedora +9 more +11 morecurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...CVE-2022-42915Fix available8.1 High
- haxx curl, apple macos, debian linux +9 more +11 moreWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...CVE-2022-32221Fix available9.8 Critical
- Show moreLoading…