netapp Vulnerability Advisory Catalog

Total 261 security vulnerabilities recorded for netapp software and firmware.

← Back to All Vendors
CVE-2021-26990 CRITICAL
Component: cloud_manager

Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability that could allow a remote attacker to overwrite arbitrary system files....

📅 2021-03-19
CVSS 9.1 Dossier →
Component: data_ontap

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which could allow a remote authenticat...

📅 2021-03-04
CVSS 6.5 Dossier →
Component: data_ontap

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant ...

📅 2021-03-04
CVSS 3.5 Dossier →
Component: clustered_data_ontap

Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacker to discover node names via A...

📅 2021-02-08
CVSS 3.3 Dossier →
CVE-2020-8587 MEDIUM
Component: oncommand_system_manager

OnCommand System Manager 9.x versions prior to 9.3P20 and 9.4 prior to 9.4P3 are susceptible to a vulnerability that could allow HTTP clients to cache...

📅 2021-02-08
CVSS 5.5 Dossier →
Component: clustered_data_ontap

Clustered Data ONTAP versions prior to 9.3P20 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport ...

📅 2021-02-08
CVSS 3.3 Dossier →
Component: clustered_data_ontap

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover th...

📅 2021-02-03
CVSS 3.5 Dossier →
Component: clustered_data_ontap

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover th...

📅 2021-02-03
CVSS 3.5 Dossier →
CVE-2020-8585 MEDIUM
Component: oncommand_unified_manager

OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY L...

📅 2021-01-28
CVSS 5.5 Dossier →
CVE-2020-8581 MEDIUM
Component: clustered_data_ontap

Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker ...

📅 2021-01-19
CVSS 6.5 Dossier →
CVE-2020-8584 CRITICAL
Component: hci_management_node

Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrar...

📅 2021-01-08
CVSS 9.8 Dossier →
Component: cloud_backup

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp...

📅 2021-01-07
CVSS 8.1 Dossier →
Component: cloud_backup

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons...

📅 2021-01-07
CVSS 8.1 Dossier →
Component: cloud_backup

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp....

📅 2021-01-06
CVSS 8.1 Dossier →
Component: service_level_manager

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp....

📅 2021-01-06
CVSS 8.1 Dossier →
Component: hci

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover s...

📅 2020-11-13
CVSS 7.5 Dossier →
CVE-2020-8582 MEDIUM
Component: hci

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to ...

📅 2020-11-13
CVSS 6.5 Dossier →
CVE-2020-8577 MEDIUM
Component: e-series_santricity_os_controller

SANtricity OS Controller Software versions 11.50.1 and higher are susceptible to a vulnerability which could allow an attacker to discover sensitive i...

📅 2020-11-06
CVSS 5.9 Dossier →
Component: e-series_santricity_os_controller

SANtricity OS Controller Software versions 11.30 and higher are susceptible to a vulnerability which allows an unauthenticated attacker with access to...

📅 2020-11-06
CVSS 7.5 Dossier →
Component: clustered_data_ontap

Clustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows an attacker with access to an intercluster LIF to caus...

📅 2020-10-27
CVSS 7.5 Dossier →
CVE-2020-8576 MEDIUM
Component: clustered_data_ontap

Clustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when successfully exploited could lead t...

📅 2020-09-02
CVSS 5.4 Dossier →
CVE-2020-8575 MEDIUM
Component: active_iq_unified_manager

Active IQ Unified Manager for VMware vSphere and Windows versions prior to 9.5 are susceptible to a vulnerability which allows administrative users to...

📅 2020-08-03
CVSS 4.4 Dossier →
Component: active_iq_unified_manager

Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service enabled a...

📅 2020-08-03
CVSS 7.8 Dossier →
Component: active_iq_unified_manager

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 a...

📅 2020-07-15
CVSS 4.9 Dossier →
Page 6 of 11 (261 Total Records)