28 matches found
EUVD-2017-6967
Malware in sbrugna...
EUVD-2018-17251
Malware in sbrugna...
EUVD-2015-7785
Malware in sbrugna...
CVE-2025-26512
SnapCenter versions prior to 6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin user on a remote system where a SnapCenter plug-in has been installed...
CVE-2023-27316
SnapCenter versions 4.8 through 4.9 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin user on a remote system where a SnapCenter plug-in has been installed...
CVE-2023-27316 Privilege Escalation Vulnerability in SnapCenter
SnapCenter versions 4.8 through 4.9 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin user on a remote system where a SnapCenter plug-in has been installed...
CVE-2018-5482
NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel...
CVE-2018-5482
NetApp SnapCenter Server prior to 4.1 is affected by a vulnerability where a sensitive cookie is not secured with the Secure flag in HTTPS sessions, potentially allowing the cookie to be transmitted in cleartext over an unencrypted channel. Root cause: missing Secure attribute on a sensitive cook...
CVE-2017-15515
NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field...
CVE-2017-15515
NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field...
PT-2019-10986
Name of the Vulnerable Software and Affected Versions: NetApp SnapCenter Server versions prior to 4.1 Description: The issue concerns the transmission of a sensitive cookie in plain text over an unencrypted channel due to the lack of a secure flag in an HTTPS session. Recommendations: For version...
CVE-2018-5482: Missing Encryption of Sensitive Data
NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel...
CVE-2017-15515: Improper Neutralization of Input During Web Page Generation
NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field...
PT-2019-8023
Name of the Vulnerable Software and Affected Versions NetApp SnapCenter Server versions prior to 4.0 Description The issue allows a privileged user to inject arbitrary scripts into the custom secondary policy label field, potentially leading to cross-site scripting. Recommendations For versions...
Cross site request forgery (csrf)
NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery CSRF vulnerability which could be used to cause an unintended authenticated action in the user interface...
CVE-2017-15516
NetApp SnapCenter Server versions 1.1–2.x are vulnerable to Cross-Site Request Forgery (CSRF) that can cause unintended authenticated actions in the UI. The issue is caused by CSRF in the server’s web interface, enabling an attacker to exploit a user’s authenticated session to perform actions wit...
PT-2017-14079
Name of the Vulnerable Software and Affected Versions NetApp SnapCenter Server versions 1.1 through 2.x Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This could potentially be used to cause an unintended authenticated action in the user interface...
CVE-2017-15516: Cross-Site Request Forgery (CSRF)
NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery CSRF vulnerability which could be used to cause an unintended authenticated action in the user interface...