NetApp

Records2528All Threatist records

Exploited (KEV)41In CISA KEV

CVSS critical242CVSS 9.0–10.0

CVSS high849CVSS 7.0–8.9

Exploited now

NetApp records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2022-00894 Linux Kernel Out-of-Bounds Write Vulnerability CRITICAL 93KEV 2026-08-26 TI-2022-00413 Linux Kernel Improper Authentication Vulnerability CRITICAL 93KEV 2026-06-02 TI-2018-10499 Linux Kernel Integer Overflow Vulnerability CRITICAL 93KEV 2026-01-26 TI-2021-05514 Linux Kernel Heap Out-of-Bounds Write Vulnerability CRITICAL 95KEV 2025-10-06 TI-2024-36205 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Oncommand Insight 971 records CRITICAL Active Iq Unified Manager 849 records CRITICAL Oncommand Workflow Automation 744 records CRITICAL Snapcenter 575 records CRITICAL Cloud Backup 349 records CRITICAL H700s Firmware 296 records CRITICAL H300s Firmware 295 records CRITICAL H410s Firmware 295 records CRITICAL

Records

75 records in 7-mode Transition Tool · all components

TI-2016-07192 CVE-2016-8735 · GHSA-cw54-59pw-4g8c

Improper access control in Apache Tomcat

CRITICAL 100KEV

Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.90338 Published 2017-04-06 Partial fix · 6.0.48, 7.0.73 +3 CWE-284

TI-2017-09340 CVE-2017-12615 · GHSA-pjfr-qf3p-3q25

Unrestricted file upload in Apache Tomcat

CRITICAL 94KEV

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.99707 Published 2017-09-19 Fixed in 7.0.79 CWE-434

TI-2022-15084 CVE-2022-34169 · GHSA-9339-86wc-4qgf

Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

HIGH 79

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.81759 Published 2022-07-19 Partial fix · 2.7.3 CWE-681

TI-2022-05834 CVE-2022-21449 · GHSA-cj8x-r9fp-q656

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

HIGH 78

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.77151 Published 2022-04-19 Fixed

TI-2023-13226 CVE-2023-28709 · GHSA-cx6h-86xw-9x34

Apache Tomcat: Fix for CVE-2023-24998 is incomplete

HIGH 69

The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.48031 Published 2023-05-22 Partial fix · 11.0.0-M5, 10.1.8 +2 CWE-193

TI-2022-05732 CVE-2022-21341 · GHSA-m2jc-h86g-63rm

Deserialization of untrusted data in Oracle Java SE JDK and JRE

MEDIUM 57

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03765 Published 2022-01-19 Partial fix CWE-502

TI-2020-02502 CVE-2020-2803 · GHSA-7q6q-6j5w-jcg9

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

MEDIUM 47

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.0623 Published 2020-04-15 Partial fix

TI-2020-11513 CVE-2020-14664 · GHSA-cfp9-cx5p-7jfp

Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX).

MEDIUM 45

Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.0428 Published 2020-07-15 No fix listed

TI-2020-11432 CVE-2020-14583 · GHSA-7cv6-52m7-636w

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.0392 Published 2020-07-15 Partial fix

TI-2020-02504 CVE-2020-2805 · GHSA-rjrq-hcmw-c76j

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.04051 Published 2020-04-15 Partial fix

TI-2020-02515 CVE-2020-2816 · GHSA-wq43-mwf7-pm7c

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE).

MEDIUM 44

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02766 Published 2020-04-15 Fixed

TI-2022-05731 CVE-2022-21340 · GHSA-78gw-5p6w-hw23

Uncontrolled resource consumption in Oracle Java SE JDK and JRE

MEDIUM 41

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.07748 Published 2022-01-19 Partial fix CWE-400

TI-2022-05684 CVE-2022-21293 · GHSA-xwxc-rh9r-2448

Uncontrolled resource consumption in Oracle Java SE JDK and JRE

MEDIUM 41

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.08346 Published 2022-01-19 Partial fix CWE-400

TI-2020-11442 CVE-2020-14593 · GHSA-5h6c-hfmg-9hrj

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).

LOW 39

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.03846 Published 2020-07-15 Partial fix

TI-2020-02529 CVE-2020-2830 · GHSA-94wm-9j29-vhm4

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 38

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04948 Published 2020-04-15 Partial fix

TI-2020-02482 CVE-2020-2781 · GHSA-8p3r-9538-fcv4

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 38

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04948 Published 2020-04-15 Partial fix

TI-2023-08305 CVE-2023-21930 · GHSA-4j35-7cr4-3mc8

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01295 Published 2023-04-18 Partial fix

TI-2022-05920 CVE-2022-21540 · GHSA-975q-8v3h-8j23

Use after free in Oracle Java SE JDK and JRE

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04167 Published 2022-07-19 Partial fix CWE-416

TI-2022-05674 CVE-2022-21283 · GHSA-g325-5mrh-jpx2

Protection mechanism failure in Oracle Java SE JDK and JRE

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03782 Published 2022-01-19 Partial fix CWE-693

TI-2020-11470 CVE-2020-14621 · GHSA-p493-cq87-mf78

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 37

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04471 Published 2020-07-15 Partial fix

TI-2022-05812 CVE-2022-21426 · GHSA-3g8v-2w9j-wwcx

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03177 Published 2022-04-19 Partial fix

TI-2022-05756 CVE-2022-21366 · GHSA-hgv5-w5qv-cpfg

Uncontrolled resource consumption in Oracle Java SE JDK and JRE

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03216 Published 2022-01-19 Fixed CWE-400

TI-2022-05755 CVE-2022-21365 · GHSA-g272-mw8v-rcqj

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03486 Published 2022-01-19 Partial fix

TI-2022-05750 CVE-2022-21360 · GHSA-crw7-qg66-gv9w

Uncontrolled resource consumption in Oracle Java SE JDK and JRE

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03486 Published 2022-01-19 Partial fix CWE-400

TI-2022-05739 CVE-2022-21349 · GHSA-mv36-g4g7-p396

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03306 Published 2022-01-19 No fix listed

Open these records in search →

Critical	242
High	849
Medium	1282
Low	155
No CVSS	0