Netapp

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-7974 4Debian NetappNtp+1 more 6Clustered Data Ontap Debian LinuxNtp+3 more May 6, 2026 Jan 26, 2016 N/A· v4 7.7 HIGH· v3 4.0 MEDIUM· v2 NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted k...Show more NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."Show less
CVE-2015-7886 1Netapp 1Data Ontap May 6, 2026 Jan 18, 2016 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors.
CVE-2015-3292 1Netapp 1Oncommand Workflow Automation May 6, 2026 May 31, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified v...Show more The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified vectors.Show less
CVE-2014-9354 1Netapp 1Oncommand Balance May 6, 2026 Feb 6, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 NetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via unspecified vectors related to cleartext storage.
CVE-2014-9353 1Netapp 1Oncommand Balance May 6, 2026 Feb 6, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 NetApp OnCommand Balance before 4.2P2 contains a "default privileged account," which allows remote attackers to gain privileges via unspecified vectors.
CVE-2010-5312 6Apache DebianDrupal+3 more 6Debian Linux DrillDrupal+3 more May 6, 2026 Nov 24, 2014 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
CVE-2010-1871 2Netapp Redhat 4Jboss Enterprise Application Platform Oncommand BalanceOncommand Insight+1 more Apr 22, 2026 Aug 5, 2010 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to exe...Show more JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.Show less
CVE-2008-3349 1Netapp 1Data Ontap Apr 23, 2026 Jul 28, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service (system crash), or obtain sensitive...Show more Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service (system crash), or obtain sensitive information, probably related to insufficient access control for HTTP requests. NOTE: this may overlap CVE-2008-3160.Show less
CVE-2007-2768 2Netapp Openbsd 5Hci Management Node Hci Storage NodeOpenssh+2 more Apr 23, 2026 May 21, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is conf...Show more OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.Show less
CVE-2007-2379 2Jquery Netapp 2Jquery Snapcenter Apr 23, 2026 Apr 30, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The jQuery framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL i...Show more The jQuery framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."Show less

Previous 1...122 123 124 125126