CVE-2021-28165

The CVE-2021-28165 issue affects Eclipse Jetty versions 7.2.2–9.4.38, 10.0.0.alpha0–10.0.1, and 11.0.0.alpha0–11.0.1, where handling a large invalid TLS frame can cause CPU usage to reach 100%, leading to resource exhaustion. The underlying cause is described as abnormal processing after receivin...

CVE-2017-7657

CVE-2017-7657 affects Eclipse Jetty: transfer-encoding chunk size parsing could overflow an integer, causing large chunks to be treated as smaller ones and enabling a fake pipelined request that bypasses intermediary authorization. Affected versions include Jetty 9.2.x and older, 9.3.x (all confi...

CVE-2022-23234

Vulnerability exists in NetApp SnapCenter prior to 4.5. A local authenticated attacker could read plaintext HANA credentials from SnapCenter components. Affected product: SnapCenter (versions before 4.5). Root cause details are not fully disclosed in the provided documents beyond the credential d...

CVE-2025-26512

CVE-2025-26512 affects NetApp SnapCenter prior to 6.0.1P1 and 6.1P1. An authenticated SnapCenter Server user can escalate to admin on a remote system where a SnapCenter plug-in is installed. Impact is privilege escalation with high severity (CVSS v3.1: 9.9, CRITICAL). Remediation: update to 6.0.1...

CVE-2022-38732

CVE-2022-38732 affects NetApp SnapCenter prior to version 4.7. The issue arises from the absence of a Content Security Policy (CSP), which could allow certain types of attacks that CSP would otherwise mitigate. Red Hat and related feeds corroborate that older SnapCenter builds ship without CSP, c...

CVE-2024-21993

CVE-2024-21993 affects NetApp SnapCenter versions prior to 5.0p1. The issue allows an authenticated attacker to discover plaintext credentials, constituting an information disclosure vulnerability. Public details consistently indicate the affected component is SnapCenter’s credential handling pri...