Skip to contentNetapp vulnerabilities
Products
Show 140 moreShow less
Newest
- es iperf3, netapp hci compute node, ontap 9 +2 moreiperf v3.17.1 was discovered to contain a segmentation violation via the...CVE-2024-53580Fix available7.5 High
- apache tomcat, netapp bootstrap os +1 moreApache Tomcat: DoS in examples web applicationCVE-2024-54677Fix available5.3 Medium
- apache tomcat, netapp bootstrap os +1 moreApache Tomcat: RCE due to TOCTOU issue in JSP compilationCVE-2024-50379Public exploitFix availableEPSS 31.8%9.8 Critical
- curl, netapp bootstrap os, h300s firmware +29 more +31 morenetrc and redirect credential leakCVE-2024-11053Fix available3.4 Low
- php, netapp ontap +1 moreOOB access in ldap_escapeCVE-2024-8932Fix available9.8 Critical
- gnome glib, debian linux, netapp active iq unified manager +31 more +33 moregio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer...CVE-2024-52533Fix available9.8 Critical
- netapp storagegridCVE-2024-21994 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)CVE-2024-219944.3 Medium
- ruby rexml, netapp ontap tools +1 moreREXML ReDoS vulnerabilityCVE-2024-49761Fix available6.6 Medium
- libexpat project libexpat, debian linux, netapp active iq unified manager +26 more +28 moreAn issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser...CVE-2024-50602Public exploitFix available5.9 Medium
- debian linux, netapp 500f firmware, a250 firmware +30 more +32 moreLow-level invalid GF(2^m) parameters lead to OOB memory accessCVE-2024-9143Fix availableEPSS 12.5%8.8 High
- oracle corporation mysql connectors, netapp oncommand insight, oracle mysql connector\/odbc +2 moreVulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). ...CVE-2024-21262Public exploit6.5 Medium
- oracle graalvm, graalvm for jdk, jdk +3 more +5 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-21211Fix available3.7 Low
- vim, netapp bootstrap os +1 moreuse-after-free when closing buffers in VimCVE-2024-47814Fix available3.9 Low
- apache commons io, netapp active iq unified manager, bluexp +5 more +7 moreApache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReaderCVE-2024-47554Fix available4.3 Medium
- apache avro, apache software foundation avro java sdk, netapp active iq unified manager +1 more +3 moreApache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)CVE-2024-47561Fix available9.2 Critical
- google protobuf, protocol buffers, google-protobuf [jruby gem] +8 more +10 moreStack overflow in Protocol Buffers Java LiteCVE-2024-7254Fix available8.7 High
- curl, debian linux, netapp active iq unified manager +26 more +28 moreOCSP stapling bypass with GnuTLSCVE-2024-8096Fix available6.5 Medium
- openssl, netapp bootstrap os, brocade fabric operating system +9 more +11 moreRFC7250 handshakes with unauthenticated servers don't abort as expectedCVE-2024-12797Fix available7.4 High
- netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 morePossible denial of service in X.509 name checksCVE-2024-6119Fix availableEPSS 66.6%7.5 High
- vim, netapp bootstrap os +1 moreheap-buffer-overflow in do_search() in Vim < 9.1.0689CVE-2024-43790Fix available4.5 Medium
- ruby rexml, netapp bootstrap os +1 moreREXML denial of service vulnerabilityCVE-2024-43398Fix available5.9 Medium
- apache tomcat, netapp ontap tools +1 moreApache Tomcat: Denial of ServiceCVE-2024-38286Fix available8.6 High
- spring framework, vmware spring framework, netapp active iq unified manager +1 more +3 moreCVE-2024-38808: Spring Expression DoS VulnerabilityCVE-2024-38808Fix available4.3 Medium
- vim, neovim, netapp bootstrap os +2 moreVim heap-use-after-free in src/arglist.c:207CVE-2024-43374Fix available4.5 Medium
- gnome libxml2, netapp h300s firmware, h410c firmware +6 more +8 moreIn libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can...CVE-2024-40896Fix available9.1 Critical
- vim, neovim, netapp hci compute node +2 moreVim < v9.1.0648 has a double-free in dialog_changed()CVE-2024-41965Fix available4.2 Medium
- ruby rexml, netapp bootstrap os +1 moreDenial of service in REXMLCVE-2024-39908Public exploitFix available4.3 Medium
- oracle graalvm, graalvm enterprise edition, graalvm for jdk +10 more +12 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-21147Fix available7.4 High
- oracle graalvm, graalvm for jdk, jdk +6 more +8 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-21145Fix available4.8 Medium
- oracle graalvm, netapp oncommand workflow automation, oracle jdk +2 more +4 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2024-21144Fix available3.7 Low
- oracle graalvm, graalvm for jdk, java se +9 more +11 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-21140Fix available4.8 Medium
- oracle graalvm, graalvm for jdk, jdk +7 more +9 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-21138Fix available3.7 Low
- oracle graalvm, graalvm for jdk, jdk +7 more +9 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-21131Fix available3.7 Low
- netapp snapcenterInformation Disclosure Vulnerability in SnapCenterCVE-2024-219935.7 Medium
- certifi, certifi python-certifi, netapp management services for element software and netapp hci +2 more +4 moreCertifi removes GLOBALTRUST root certificateCVE-2024-39689Public exploitFix available7.5 High
- apache http server, netapp ontap tools +1 moreApache HTTP Server: source code disclosure with handlers configured via AddTypeCVE-2024-39884Fix available6.2 Medium
- apache tomcat, netapp ontap tools +1 moreApache Tomcat: HTTP/2 excess header handling DoSCVE-2024-34750Fix available7.5 High
- apache http server, netapp ontap +1 moreApache HTTP Server: mod_rewrite proxy handler substitutionCVE-2024-39573Fix availableEPSS 35.4%7.5 High
- apache http server, netapp clustered data ontap +1 moreApache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious requestCVE-2024-38477Fix available7.5 High
- apache http server, netapp clustered data ontap +1 moreApache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirectCVE-2024-38476Public exploitFix availableEPSS 41.6%9.8 Critical
- apache http server, netapp ontap 9, sonicwall sma 200 firmware +4 more +6 moreApache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.CVE-2024-38475In KEVPublic exploitFix availableEPSS 100.0%9.1 Critical
- apache http server, netapp clustered data ontap +1 moreApache HTTP Server weakness with encoded question marks in backreferencesCVE-2024-38474Fix available9.8 Critical
- apache http server, netapp ontap +1 moreApache HTTP Server proxy encoding problemCVE-2024-38473Public exploitFix availableEPSS 25.9%8.1 High
- apache http server, netapp ontap +1 moreApache HTTP Server on WIndows UNC SSRFCVE-2024-38472Public exploitFix availableEPSS 69.5%7.5 High
- apache http server, netapp ontap +1 moreApache HTTP Server: DoS by Null pointer in websocket over HTTP/2CVE-2024-36387Fix available5.4 Medium
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Public exploitFix availableEPSS 99.5%8.1 High
- openssl, debian linux, netapp 500f firmware +40 more +42 moreSSL_select_next_proto buffer overreadCVE-2024-5535Public exploitFix available9.1 Critical
- python urllib3, debian linux, netapp active iq unified manager +2 moreProxy-Authorization request header isn't stripped during cross-origin redirects in urllib3CVE-2024-37891Fix available4.4 Medium
- netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 moreCVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale)CVE-2024-219885.3 Medium
- linux, linux kernel, netapp converged systems advisor agent +8 more +10 moreNFSD: Fix nfsd4_encode_fattr4() crasherCVE-2024-36958Fix available9.8 Critical
- Show moreLoading…