NetApp

Records2528All Threatist records

Exploited (KEV)41In CISA KEV

CVSS critical242CVSS 9.0–10.0

CVSS high849CVSS 7.0–8.9

Exploited now

NetApp records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2022-00894 Linux Kernel Out-of-Bounds Write Vulnerability CRITICAL 93KEV 2026-08-26 TI-2022-00413 Linux Kernel Improper Authentication Vulnerability CRITICAL 93KEV 2026-06-02 TI-2018-10499 Linux Kernel Integer Overflow Vulnerability CRITICAL 93KEV 2026-01-26 TI-2021-05514 Linux Kernel Heap Out-of-Bounds Write Vulnerability CRITICAL 95KEV 2025-10-06 TI-2024-36205 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Oncommand Insight 971 records CRITICAL Active Iq Unified Manager 849 records CRITICAL Oncommand Workflow Automation 744 records CRITICAL Snapcenter 575 records CRITICAL Cloud Backup 349 records CRITICAL H700s Firmware 296 records CRITICAL H300s Firmware 295 records CRITICAL H410s Firmware 295 records CRITICAL

Records

23 records in Snapcenter Server · all components

TI-2020-08897 CVE-2020-11023 · GHSA-jpcq-cgw6-v4j6

Potential XSS vulnerability in jQuery

CRITICAL 88KEV

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.84887 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 CWE-79

TI-2018-05791 CVE-2018-8014 · GHSA-r4x2-3cq5-hqvp

The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8…

MEDIUM 61

The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all origins.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.20942 Published 2018-05-16 Partial fix · 9.0.9, 8.5.32 +2 CWE-1188

TI-2016-07072 CVE-2016-8610 · GHSA-v2q2-jxh8-m5h8

Uncontrolled resource consumption in OpenSSL

MEDIUM 60

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.39919 Published 2017-11-13 Partial fix CWE-400

TI-2017-11342 CVE-2017-15516 · GHSA-mghp-6344-hxqp

Cross-site request forgery in NetApp SnapCenter Server

LOW 39

NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an unintended authenticated action in the user interface.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00561 Published 2017-11-16 No fix listed CWE-352

TI-2015-06556 CVE-2015-7887 · GHSA-pq5f-pfwf-jh6f

NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups.

LOW 38

NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01426 Published 2017-08-07 No fix listed CWE-284

TI-2016-01389 CVE-2016-1502 · GHSA-3jx3-rj5x-wr5c

NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass…

LOW 35

NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors.

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.01559 Published 2017-02-07 No fix listed CWE-287

TI-2020-11610 CVE-2020-14775 · GHSA-7m3x-89xx-g6x9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 34

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02455 Published 2020-10-21 Fixed

TI-2020-11604 CVE-2020-14769 · GHSA-65pf-g43v-72jx

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 34

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02455 Published 2020-10-21 Partial fix

TI-2017-11345 CVE-2017-15519 · GHSA-9393-ff8q-r5g5

Improper authentication in NetApp SnapCenter

LOW 34

Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services.

CVSS 3.0HIGH 7.2 Network No auth No interaction EPSS 0.01178 Published 2018-03-06 No fix listed CWE-287

TI-2020-11635 CVE-2020-14800 · GHSA-hxpf-2249-phjx

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security…

LOW 32

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01431 Published 2020-10-21 Fixed

TI-2020-11629 CVE-2020-14794 · GHSA-5x86-5fr8-cmrr

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02365 Published 2020-10-21 Fixed

TI-2020-11628 CVE-2020-14793 · GHSA-vpj4-wqgr-gjhq

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02365 Published 2020-10-21 Partial fix

TI-2020-11625 CVE-2020-14790 · GHSA-7mx2-6mm5-42m3

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02384 Published 2020-10-21 Fixed

TI-2020-11624 CVE-2020-14789 · GHSA-r9xf-mwcp-f4x8

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02653 Published 2020-10-21 Partial fix

TI-2020-11621 CVE-2020-14786 · GHSA-8r8r-j672-f389

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02365 Published 2020-10-21 Fixed

TI-2020-11620 CVE-2020-14785 · GHSA-mjqr-fvpf-2vx6

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02365 Published 2020-10-21 Fixed

TI-2020-11612 CVE-2020-14777 · GHSA-f7jj-v5xr-x9v5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02365 Published 2020-10-21 Fixed

TI-2020-11608 CVE-2020-14773 · GHSA-c8p2-m7p2-6xhm

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02365 Published 2020-10-21 Fixed

TI-2020-11521 CVE-2020-14672 · GHSA-pggr-cgrf-hxvh

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored…

LOW 27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02434 Published 2020-10-21 Partial fix

TI-2018-03991 CVE-2018-5482 · GHSA-3jh6-397c-67wx

NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie…

LOW 26

NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00926 Published 2019-03-04 Fixed in 4.1 CWE-311

TI-2020-11634 CVE-2020-14799 · GHSA-3j7r-r3f2-4jqr

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security…

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01349 Published 2020-10-21 Fixed

TI-2017-11341 CVE-2017-15515 · GHSA-7h8j-359j-r8rj

Cross-site scripting in NetApp SnapCenter Server

LOW 23

NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00676 Published 2019-03-04 Fixed in 4.0 CWE-79

TI-2020-11626 CVE-2020-14791 · GHSA-78hj-3x6q-5g34

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 15

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1LOW 2.2 Network High privileges No interaction EPSS 0.01607 Published 2020-10-21 Fixed

Open these records in search →