netapp Vulnerability Advisory Catalog

Total 261 security vulnerabilities recorded for netapp software and firmware.

← Back to All Vendors
Component: clustered_data_ontap

Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an authentic...

📅 2021-10-19
CVSS 5.5 Dossier →
Component: clustered_data_ontap

Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking ...

📅 2021-10-12
CVSS 4.7 Dossier →
Component: cloud_manager

NetApp Cloud Manager versions prior to 3.9.10 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to retrieve sensi...

📅 2021-10-11
CVSS 7.5 Dossier →
Component: cloud_manager

NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory connection fails. The logged information is available ...

📅 2021-08-06
CVSS 4.3 Dossier →
Component: cloud_manager

NetApp Cloud Manager versions prior to 3.9.9 log sensitive information that is available only to authenticated users. Customers with auto-upgrade enab...

📅 2021-08-06
CVSS 4.3 Dossier →
Component: c400_firmware

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or...

📅 2021-07-07
CVSS 8.3 Dossier →
Component: e-series_santricity_os_controller

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could a...

📅 2021-06-11
CVSS 7.5 Dossier →
Component: e-series_santricity_os_controller

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could a...

📅 2021-06-11
CVSS 8.8 Dossier →
Component: e-series_santricity_os_controller

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could a...

📅 2021-06-11
CVSS 5.3 Dossier →
Component: e-series_santricity_os_controller

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could a...

📅 2021-06-11
CVSS 6.5 Dossier →
Component: clustered_data_ontap

Clustered Data ONTAP versions prior to 9.7P13 and 9.8P3 are susceptible to a vulnerability which could allow single workloads to cause a Denial of Ser...

📅 2021-06-04
CVSS 6.5 Dossier →
Component: oncommand_insight

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote at...

📅 2021-03-23
CVSS 5.4 Dossier →
Component: oncommand_insight

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a rem...

📅 2021-03-23
CVSS 5.3 Dossier →
Component: oncommand_insight

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a rem...

📅 2021-03-23
CVSS 6.1 Dossier →
Component: oncommand_insight

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a rem...

📅 2021-03-23
CVSS 5.3 Dossier →
Component: oncommand_insight

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a rem...

📅 2021-03-23
CVSS 6.1 Dossier →
Component: oncommand_insight

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a rem...

📅 2021-03-23
CVSS 6.1 Dossier →
Component: oncommand_insight

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a rem...

📅 2021-03-23
CVSS 5.8 Dossier →
Component: oncommand_insight

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a rem...

📅 2021-03-23
CVSS 5.3 Dossier →
Component: oncommand_insight

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed s...

📅 2021-03-23
CVSS 5.3 Dossier →
Component: oncommand_insight

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed s...

📅 2021-03-23
CVSS 5.3 Dossier →
Component: oncommand_insight

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remot...

📅 2021-03-23
CVSS 7.5 Dossier →
Component: cloud_manager

Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability which could allow a remote attacker to cause a Denial of Service (DoS)....

📅 2021-03-19
CVSS 7.5 Dossier →
Component: cloud_manager

Cloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing (CORS) policy which could allow a remote attacker to interact ...

📅 2021-03-19
CVSS 7.5 Dossier →
Page 5 of 11 (261 Total Records)