Read the docs

NetApp

Records2528All Threatist records
Exploited (KEV)41In CISA KEV
CVSS critical242CVSS 9.0–10.0
CVSS high849CVSS 7.0–8.9

Exploited now

NetApp records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2022-00894 Linux Kernel Out-of-Bounds Write Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2022-00413 Linux Kernel Improper Authentication Vulnerability Priority CRITICAL 93KEV 2026-06-02TI-2018-10499 Linux Kernel Integer Overflow Vulnerability Priority CRITICAL 93KEV 2026-01-26TI-2021-05514 Linux Kernel Heap Out-of-Bounds Write Vulnerability Priority CRITICAL 95KEV 2025-10-06TI-2024-36205 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability Priority CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records
Oncommand Insight 971 records CRITICAL Active Iq Unified Manager 849 records CRITICAL Oncommand Workflow Automation 744 records CRITICAL Snapcenter 575 records CRITICAL Cloud Backup 349 records CRITICAL H700s Firmware 296 records CRITICAL H300s Firmware 295 records CRITICAL H410s Firmware 295 records CRITICAL

Records

9 records in Element Plug-in For Vcenter Server · all components

TI-2021-13463 CVE-2021-34429 · GHSA-vjv5-gp2w-65vm

Information disclosure in Eclipse Jetty

Priority HIGH 69

For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.9933 Published 2021-07-15 Partial fix · 9.4.43, 10.0.6 +1 CWE-200
TI-2021-09393 CVE-2021-28164 · GHSA-v7ff-8wcx-gmc5

Information disclosure in Eclipse Jetty

Priority HIGH 65

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.82371 Published 2021-04-01 Partial fix · 9.4.39 CWE-200
TI-2020-16549 CVE-2020-27223 · GHSA-m394-8rww-3jr7

Uncontrolled resource consumption in Eclipse Jetty

Priority MEDIUM 64

In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.78031 Published 2021-02-26 Partial fix · 9.4.37, 10.0.1 +1 CWE-407
TI-2022-01897 CVE-2022-2048 · GHSA-wgmr-mf83-7x4j

Uncontrolled resource consumption in Eclipse Jetty

Priority LOW 38

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02562 Published 2022-07-07 Partial fix · 9.4.47, 10.0.10 +1 CWE-410
TI-2021-09392 CVE-2021-28163 · GHSA-j6qj-j888-vvgq

Information disclosure in Eclipse Jetty

Priority LOW 21

In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadverte…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.0418 Published 2021-04-01 Partial fix · 9.4.39, 10.0.2 +1 CWE-200
TI-2021-13462 CVE-2021-34428 · GHSA-m6cp-vxjx-65j6

Insufficient session expiration in Eclipse Jetty

Priority LOW 19

For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager.

CVSS 3.1LOW 3.5 Physical No auth No interaction EPSS 0.00963 Published 2021-06-22 Partial fix · 9.4.41, 10.0.3 +1 CWE-613
TI-2022-01896 CVE-2022-2047 · GHSA-cj7v-27pg-wf7q

Improper input validation in Eclipse Jetty

Priority LOW 16

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid inpu…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.01324 Published 2022-07-07 Partial fix · 9.4.47, 10.0.10 +1 CWE-20
Open these records in search →