Read the docs

NetApp

Records2528All Threatist records
Exploited (KEV)41In CISA KEV
CVSS critical242CVSS 9.0–10.0
CVSS high849CVSS 7.0–8.9

Exploited now

NetApp records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2022-00894 Linux Kernel Out-of-Bounds Write Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2022-00413 Linux Kernel Improper Authentication Vulnerability Priority CRITICAL 93KEV 2026-06-02TI-2018-10499 Linux Kernel Integer Overflow Vulnerability Priority CRITICAL 93KEV 2026-01-26TI-2021-05514 Linux Kernel Heap Out-of-Bounds Write Vulnerability Priority CRITICAL 95KEV 2025-10-06TI-2024-36205 AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability Priority CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records
Oncommand Insight 971 records CRITICAL Active Iq Unified Manager 849 records CRITICAL Oncommand Workflow Automation 744 records CRITICAL Snapcenter 575 records CRITICAL Cloud Backup 349 records CRITICAL H700s Firmware 296 records CRITICAL H300s Firmware 295 records CRITICAL H410s Firmware 295 records CRITICAL

Records

182 records in Snapmanager · all components

TI-2022-01915 CVE-2022-2068 · GHSA-xjxr-x4h8-946x

The c_rehash script allows command injection

Priority CRITICAL 93

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96391 Published 2022-06-21 Partial fix CWE-78
TI-2022-01176 CVE-2022-1292 · GHSA-qjmp-vmxc-7p8r

The c_rehash script allows command injection

Priority CRITICAL 90

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.82612 Published 2022-05-03 Partial fix CWE-78
TI-2020-16038 CVE-2020-26217 · GHSA-mw36-7c6c-q4q2

Remote Code Execution in XStream

Priority CRITICAL 87

XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.84968 Published 2020-11-16 Partial fix · 1.4.14, 1.4.14-java7 CWE-78
TI-2022-07428 CVE-2022-23305 · GHSA-65fg-84f6-3jq3

SQL injection in JDBC Appender in Apache Log4j V1

Priority CRITICAL 85

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.66537 Published 2022-01-18 Partial fix · 2.0-alpha1 CWE-89
TI-2022-07425 CVE-2022-23302 · GHSA-w9p3-5cr8-m3jj

Deserialization of untrusted data in JMSSink in Apache Log4j 1.x

Priority HIGH 76

JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has ac…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.63841 Published 2022-01-18 Partial fix · 2.0-alpha1 CWE-502
TI-2020-16549 CVE-2020-27223 · GHSA-m394-8rww-3jr7

Uncontrolled resource consumption in Eclipse Jetty

Priority MEDIUM 64

In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.78031 Published 2021-02-26 Partial fix · 9.4.37, 10.0.1 +1 CWE-407
TI-2021-14283 CVE-2021-35556 · GHSA-rx4c-whwx-3x45

Protection mechanism failure in Oracle Java SE JDK and JRE

Priority MEDIUM 63

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.08395 Published 2021-10-20 Partial fix CWE-693
TI-2024-02335 CVE-2024-2511 · GHSA-299c-jvhc-gxj8

Unbounded memory growth with session handling in TLSv1.3

Priority MEDIUM 61

Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memo…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.59302 Published 2024-04-08 Partial fix · 3.2.2, 3.1.6 +2 CWE-1325
TI-2021-02476 CVE-2021-3517 · GHSA-jw9f-hh49-cvp9

Out-of-bounds write in libxml2

Priority MEDIUM 60

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.16986 Published 2021-05-19 Partial fix · 1.11.4 CWE-787
TI-2017-05294 CVE-2017-7658 · GHSA-6x9x-8qw9-9pp6

In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x…

Priority MEDIUM 60

In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18996 Published 2018-06-26 Partial fix · 9.2.25, 9.3.24 +4 CWE-444
TI-2017-05293 CVE-2017-7657 · GHSA-vgg8-72f2-qm23

Integer overflow in Eclipse Jetty

Priority MEDIUM 57

In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14371 Published 2018-06-26 Partial fix · 9.3.24, 9.4.11 +2 CWE-444
Load more
Open these records in search →