Netapp vulnerabilities
77 CVEs and advisories name Netapp as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-27319 CVE-2023-27319 Information Disclosure Vulnerability in ONTAP Mediator
- CVE-2023-27317Information Disclosure Vulnerability in ONTAP 9
- CVE-2023-27316Privilege Escalation Vulnerability in SnapCenter
- CVE-2023-27314Denial of Service Vulnerability in ONTAP 9
- CVE-2023-27313Privilege Escalation Vulnerability in SnapCenter
- CVE-2023-27312Privilege Escalation Vulnerability in SnapCenter Plugin for VMware vSphere
- CVE-2023-27315Information Disclosure Vulnerability in SnapGathers
- CVE-2020-8573The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers (BMC) are shipped with a documented default account and password that
- CVE-2020-8571StorageGRID (formerly StorageGRID Webscale) versions 10.0.0 through 11.3 prior to 11.2.0.8 and 11.3.0.4 are susceptible to a vulnerability w
- CVE-2019-17275OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers.
- CVE-2019-17274NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default a
- CVE-2019-17273E-Series SANtricity OS Controller Software version 11.60.0 is susceptible to a vulnerability which allows an attacker to cause a Denial of S
- CVE-2019-17272All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully exploited could allow
- CVE-2019-5509ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when succe
- CVE-2019-5503OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker t
- CVE-2019-5498OnCommand Insight versions through 7.3.6 may disclose sensitive account information to an authenticated user.
- CVE-2019-5501Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthenticated remote attackers
- CVE-2019-5493Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 are susceptible to a vulnerability which discloses information to an unauthenticate
- CVE-2019-5497NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that co
- CVE-2019-5496Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain s
- CVE-2019-5495OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which
- CVE-2019-5494OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which could allow an attack
- CVE-2019-5492Element Plug-in for vCenter Server versions prior to 4.2.3 may disclose sensitive account information to an unauthenticated attacker.
- CVE-2019-5490Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled
- CVE-2018-5482NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmissi
- CVE-2017-15515NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbi
- CVE-2019-5491Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive informatio
- CVE-2018-5499ATTO FibreBridge 7500N firmware version 2.95 is susceptible to a vulnerability which allows attackers to cause a Denial of Service (DoS).
- CVE-2018-5498Clustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows remote authenticated attackers to cause a Deni
- CVE-2018-5497Clustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a vulnerability which discloses sensitive information to