Netapp

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-5645 4Apache NetappOracle+1 more 79Api Gateway Application Testing SuiteAutovue Vuelink Integration+76 more May 13, 2026 Apr 17, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, c...Show more In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.Show less
CVE-2017-7345 1Netapp 1Clustered Data Ontap May 13, 2026 Apr 10, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind the Java Management Extension Remote Method Invocation (aka JMX RMI) service to the network, which...Show more NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind the Java Management Extension Remote Method Invocation (aka JMX RMI) service to the network, which allows remote attackers to obtain sensitive information via unspecified vectors.Show less
CVE-2017-5988 1Netapp 1Clustered Data Ontap May 13, 2026 Apr 10, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NetApp Clustered Data ONTAP 8.1 through 9.1P1, when NFS or SMB is enabled, allows remote attackers to cause a denial of service via unspecified vectors.
CVE-2016-8735 6Apache CanonicalDebian+3 more 197 Mode Transition Tool Agile Engineering Data ManagementAgile Plm+16 more Apr 21, 2026 Apr 6, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX p...Show more Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.Show less
CVE-2016-7103 7Debian FedoraprojectJqueryui+4 more 13Application Express Business IntelligenceDebian Linux+10 more May 13, 2026 Mar 15, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.
CVE-2016-8747 2Apache Netapp 3Oncommand Insight Oncommand ShiftTomcat Apr 16, 2026 Mar 14, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to...Show more An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request.Show less
CVE-2017-5638 7Apache ArubanetworksHp+4 more 9Clearpass Policy Manager Oncommand BalanceServer Automation+6 more Apr 21, 2026 Mar 11, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to ex...Show more The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.Show less
CVE-2017-5995 1Netapp 1Ontap Select Deploy Administration Utility May 13, 2026 Mar 1, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive information via unspecified vectors.
CVE-2016-5374 1Netapp 1Data Ontap May 13, 2026 Mar 1, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of the owner_rights ACL entry.
CVE-2016-6667 1Netapp 1Oncommand Unified Manager For Clustered Data Ontap May 13, 2026 Feb 7, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2016-6495 1Netapp 1Data Ontap May 13, 2026 Feb 7, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access.
CVE-2016-5711 1Netapp 1Virtual Storage Console For Vmware Vsphere May 13, 2026 Feb 7, 2017 N/A· v4 9.8 CRITICAL· v3 6.8 MEDIUM· v2 NetApp Virtual Storage Console for VMware vSphere before 6.2.1 uses a non-unique certificate, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors.
CVE-2016-5372 1Netapp 1Snap Creator Framework May 13, 2026 Feb 7, 2017 N/A· v4 6.3 MEDIUM· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in NetApp Snap Creator Framework before 4.3.0P1 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.
CVE-2016-4341 1Netapp 1Clustered Data Ontap May 13, 2026 Feb 7, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors.
CVE-2016-3063 1Netapp 1Oncommand System Manager May 13, 2026 Feb 7, 2017 N/A· v4 7.5 HIGH· v3 4.4 MEDIUM· v2 Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authenticated users to execute arbitrary API calls via unspecified vectors.
CVE-2016-1894 1Netapp 1Oncommand Workflow Automation May 13, 2026 Feb 7, 2017 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 NetApp OnCommand Workflow Automation before 3.1P2 allows remote attackers to bypass authentication via unspecified vectors.
CVE-2016-1502 1Netapp 1Snapcenter Server May 13, 2026 Feb 7, 2017 N/A· v4 7.3 HIGH· v3 7.5 HIGH· v2 NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors.
CVE-2015-8544 1Netapp 1Snapdrive May 13, 2026 Feb 7, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NetApp SnapDrive for Windows before 7.0.2P4, 7.0.3, and 7.1 before 7.1.3P1 allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2015-8322 1Netapp 1Data Ontap May 13, 2026 Feb 7, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 NetApp OnCommand System Manager 8.3.x before 8.3.2 allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVE-2016-10165 6Canonical DebianLittlecms+3 more 19Active Iq Unified Manager Debian LinuxE Series Santricity Management+16 more May 13, 2026 Feb 3, 2017 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bo...Show more The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.Show less

Previous 1...122 123124125 126 Next