Lucene search
K

754 matches found

NCSC
NCSC
added 2021/02/09 12:0 a.m.2 views

Vulnerabilities fixed in NetApp Active IQ

NetApp has fixed several vulnerabilities in Active IQ. The vulnerabilities allow an unauthenticated remote malicious person to remote may be able to launch attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Access to sensitive data NetApp has...

9.8CVSS8.6AI score0.62015EPSS
Exploits1
CNNVD
CNNVD
added 2021/02/08 12:0 a.m.5 views

Netapp Clustered Data ONTAP 安全漏洞

NetApp Clustered Data ONTAP is NetApp's proprietary operating system for storage disk arrays. An information disclosure vulnerability exists in NetApp Clustered Data ONTAP versions prior to 9.3P20. An attacker can exploit this vulnerability via the AutoSupport bundle to discover node names even i...

3.3CVSS5.8AI score0.00065EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/02/08 12:0 a.m.5 views

Netapp Clustered Data ONTAP 安全漏洞

NetApp Clustered Data ONTAP is NetApp's proprietary operating system for storage disk arrays. An information disclosure vulnerability exists in NetApp Clustered Data ONTAP versions prior to 9.1P18, 9.3P12. An attacker can exploit this vulnerability to discover node names via the AutoSupport bundl...

3.3CVSS5.8AI score0.00065EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/02/08 12:0 a.m.3 views

Netapp OnCommand System Manager Security Vulnerability

Netapp OnCommand System Manager is a suite of storage management tools from NetApp Netapp, USA. The tool supports simplifying, controlling and automating the setup and ongoing management of NetApp storage systems. Security vulnerabilities in Netapp OnCommand System Manager versions prior to 9.3P2...

5.5CVSS6.1AI score0.0018EPSS
Exploits0References3
CNVD
CNVD
added 2021/02/04 12:0 a.m.8 views

NetApp Clustered Data ONTAP Information Disclosure Vulnerability (CNVD-2021-12093)

NetApp Clustered Data ONTAP is NetApp's proprietary operating system for storage disk arrays. An information disclosure vulnerability exists in NetApp Clustered Data ONTAP versions prior to 9.3P20, 9.5P15. An attacker could exploit this vulnerability to discover other storage virtual machines SVM...

3.5CVSS6.2AI score0.00086EPSS
Exploits0References1
CNVD
CNVD
added 2021/02/04 12:0 a.m.8 views

NetApp Clustered Data ONTAP Information Disclosure Vulnerability (CNVD-2021-12094)

NetApp Clustered Data ONTAP is NetApp's proprietary operating system for storage disk arrays. An information disclosure vulnerability exists in NetApp Clustered Data ONTAP versions prior to 9.3P20, 9.5P15. An attacker could exploit this vulnerability to discover data present on other storage...

3.5CVSS6.2AI score0.00086EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/02/03 12:0 a.m.3 views

Netapp Clustered Data ONTAP 安全漏洞

NetApp Clustered Data ONTAP is NetApp's proprietary operating system for storage disk arrays. An information disclosure vulnerability exists in NetApp Clustered Data ONTAP versions prior to 9.3P20, 9.5P15. An attacker could exploit this vulnerability to discover other storage virtual machines SVM...

3.5CVSS5.8AI score0.00086EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/02/03 12:0 a.m.2 views

Netapp Clustered Data ONTAP 安全漏洞

NetApp Clustered Data ONTAP is NetApp's proprietary operating system for storage disk arrays. An information disclosure vulnerability exists in NetApp Clustered Data ONTAP versions prior to 9.3P20, 9.5P15. An attacker could exploit this vulnerability to discover data present on other storage...

3.5CVSS5.8AI score0.00086EPSS
Exploits0References3
CNVD
CNVD
added 2021/01/30 12:0 a.m.5 views

NetApp OnCommand Unified Manager Information Disclosure Vulnerability

Netapp NetApp OnCommand Unified Manager is a suite of ONTAP system management software from the U.S. company NetApp Netapp. The software can simplify data management, monitor the storage system infrastructure and detect failures. An information disclosure vulnerability exists in NetApp OnCommand...

5.5CVSS6.2AI score0.00139EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/01/28 12:0 a.m.1 views

Netapp NetApp OnCommand Unified Manager 后置链接漏洞

Netapp NetApp OnCommand Unified Manager is a suite of ONTAP system management software from the U.S. company NetApp Netapp. The software can simplify data management, monitor the storage system infrastructure and detect failures. An information disclosure vulnerability exists in NetApp OnCommand...

5.5CVSS6.1AI score0.00139EPSS
Exploits0References3
CNVD
CNVD
added 2021/01/25 12:0 a.m.5 views

NetApp Clustered Data ONTAP Arbitrary Data Overwrite Vulnerability

NetApp Clustered Data ONTAP is a storage operating system for use in clustered mode. A security vulnerability exists in NetApp Clustered Data ONTAP that allows remote attackers to exploit the vulnerability by submitting special requests that can overwrite system data...

6.5CVSS6.9AI score0.00232EPSS
Exploits0References1
NCSC
NCSC
added 2021/01/20 12:0 a.m.1 views

Vulnerability fixed in NetApp products

A vulnerability has been fixed in NetApp products. The vulnerability allows a malicious party to obtain sensitive data obtain sensitive data. NetApp has released updates to fix the vulnerability. More information can be found on the page below:...

4.3CVSS8.2AI score0.01042EPSS
Exploits0
CNNVD
CNNVD
added 2021/01/19 12:0 a.m.2 views

Clustered Data ONTAP 安全漏洞

NetApp Clustered Data ONTAP is a storage operating system for use in clustered mode. A security vulnerability exists in NetApp Clustered Data ONTAP that allows remote attackers to exploit the vulnerability by submitting special requests that can overwrite system data...

6.5CVSS5.8AI score0.00232EPSS
Exploits0References2
OSV
OSV
added 2021/01/06 1:15 a.m.2 views

CVE-2020-36164

An issue was discovered in Veritas Enterprise Vault through 14.0. On start-up, it loads the OpenSSL library. The OpenSSL library then attempts to load the openssl.cnf configuration file which does not exist at the following locations in both the System drive typically C:\ and the product's...

8.8CVSS7.8AI score0.00049EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/01/06 12:52 a.m.23 views

CVE-2020-36164

An issue was discovered in Veritas Enterprise Vault through 14.0. On start-up, it loads the OpenSSL library. The OpenSSL library then attempts to load the openssl.cnf configuration file which does not exist at the following locations in both the System drive typically C:\ and the product's...

9.3CVSS9.3AI score0.00049EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/01/01 12:0 a.m.14 views

NetApp API Compliance Checks

Binary data netappapicompliancecheck.nbin...

7.3AI score
Exploits0
NCSC
NCSC
added 2020/12/11 12:0 a.m.2 views

Vulnerability fixed in NetApp

Netapp Snap Creator Framework includes Apache Tomcat. Apache Tomcat versions 8.5.1 through 8.5.59, 9.0.0.M5 through 9.0.39, and 10.0.0-M1 through 10.0.0-M9 are susceptible to a vulnerability that, when successfully exploited, can lead to the disclosure of sensitive information. Netapp has release...

7.5CVSS8.4AI score0.10506EPSS
Exploits0
NCSC
NCSC
added 2020/12/08 12:0 a.m.2 views

Vulnerabilities fixed in NetApp products

The makers of NetApp products have incorporated new versions of Eclipse Jetty server and Python into their products. With these, the release of sensitive information, the addition or modification of data or denial of service DoS is prevented. Netapp has released updates to fix the vulnerabilities...

9.8CVSS6.8AI score0.00854EPSS
Exploits1
NCSC
NCSC
added 2020/12/02 12:0 a.m.2 views

Vulnerabilities fixed in NetApp products

Several NetApp products contain FasterXML jackson-databind. FasterXML jackson-databind versions 2.x prior to 2.9.10.4 are susceptible to vulnerabilities that, when successfully exploited, can lead to disclosure of sensitive information, addition or modification of data, or denial of service DoS...

8.1CVSS6.6AI score0.02182EPSS
Exploits0
NCSC
NCSC
added 2020/11/27 12:0 a.m.1 views

Vulnerability fixed in Netapp products

A vulnerability has been fixed in Jackson databind, used by several Netapp products. The vulnerability allows a malicious party to execute arbitrary code under the user's privileges and to obtain sensitive data. The vulnerabilities stem from the failure to adequately validate user input prior to...

9.8CVSS7.4AI score0.01914EPSS
Exploits0
Rows per page
Query Builder