CVE-2018-2826

CVE-2018-2826 affects Oracle Java SE Libraries in Java SE 10. The vulnerability allows an unauthenticated network-based attacker to compromise Java SE, with potential takeover of the Java Runtime, per the description. CVSS 3.1 indicates HIGH impact (C, I, A HIGH) with NETWORK attack vector and re...

CVE-2018-2638

CVE-2018-2638 is addressed in IBM product advisories for IBM Netezza and IBM InfoSphere Optim. The IBM Netezza Platform Software requires upgrading to 11.2.1.2 (Fix Central link provided in the bulletin). Separately, IBM InfoSphere Optim solutions (11.3.0) should apply fix pack 11.3.0.7 to mitiga...

CVE-2018-2825

CVE-2018-2825 concerns Oracle Java SE Libraries with affected Java SE 10, allowing network-based attacks that may compromise confidentiality, integrity, and availability; the exploitation requires user interaction. The connected documents largely discuss IBM-specific advisories (IBM i, Netcool Ag...

CVE-2020-14664

CVE-2020-14664 affects Oracle Java SE (component: JavaFX ) with affected version Java SE 8u251 . The vulnerability is exploitable over the network and can be triggered by loading untrusted code in client-side Java deployments (Web Start/applets). It requires user interaction and could lead to tak...

CVE-2018-2581

CVE-2018-2581 affects Oracle Java SE (JavaFX) with Java SE versions 7u161, 8u152, and 9.0.1. An unauthenticated attacker with network access via multiple protocols can read a subset of Java SE data; exploitation requires user interaction. The issue is tied to JavaFX within client deployments (Web...

CVE-2018-2627

CVE-2018-2627 : Vulnerability in the Oracle Java SE component (Installer) for Windows installer only. Affected: Java SE 8u152 and 9.0.1. Exploitation is described as difficult and requires a logged-on, low-privilege user with user interaction; successful exploitation could lead to takeover of Jav...

CVE-2022-1678

CVE-2022-1678 affects Linux kernel 4.18–4.19, with memory/netns leaks due to improper sock reference handling in TCP pacing. Public Nessus/Unity advisories confirm the issue and reference kernel commits addressing the vulnerability; exploitation is described as remote via TCP pacing. Mitigation/r...

CVE-2022-23232

Summary of CVE-2022-23232 (StorageGRID): StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are vulnerable to an access-control issue where disabled, expired, or locked external user accounts could access S3 data they previously could view. In 11.6.0, the product changes behavio...

CVE-2022-23233

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a vulnerability that, if exploited, could cause a Denial of Service (DoS) of the Local Distribution Router (LDR) service. Affected product is NetApp StorageGRID; the issue is described across multiple sources ...

CVE-2022-23238

StorageGRID (NetApp) on Linux deployments running versions 11.6.0–11.6.0.2 with a Linux kernel older than 4.7.0 are vulnerable to an information-processing flaw that could allow a remote unauthenticated attacker to view limited metrics information and to modify alert email recipients and their co...

CVE-2023-27318

StorageGRID (formerly StorageGRID Webscale) versions 11.6.0–11.6.0.13 are impacted by a Denial of Service (DoS) that can crash the Local Distribution Router (LDR) service. The vulnerability is documented across multiple sources, including NetApp advisories and third‑party trackers, which confirm ...

CVE-2020-8571

CVE-2020-8571 affects StorageGRID (formerly StorageGRID Webscale) and is described across multiple sources as allowing an unauthenticated remote attacker to cause a Denial of Service (DoS). Affected versions are 10.0.0 through 11.3 prior to 11.2.0.8 and 11.3.0.4. The initial and connected documen...

CVE-2022-38734

CVE-2022-38734 affects NetApp StorageGRID (formerly StorageGRID Webscale) before version 11.6.0.8. The vulnerability leads to a Denial of Service that can crash the Local Distribution Router (LDR) service. The available connected documents consistently describe this DoS impact and the targeted co...

CVE-2021-27006

CVE-2021-27006 affects StorageGRID (formerly StorageGRID Webscale) versions 11.5 prior to 11.5.0.5. The available connected documents indicate that an administrative user may escalate privileges and modify settings in SANtricity System Manager. No concrete exploit details or in-the-wild exploitat...

CVE-2024-21994

CVE-2024-21994 affects NetApp StorageGRID (formerly StorageGRID Webscale) prior to version 11.9. The vulnerability allows an authenticated attacker to cause a Denial of Service, potentially crashing the service. The available connected documentation confirms the affected product and version range...

CVE-2024-21988

CVE-2024-21988 affects NetApp StorageGRID (formerly StorageGRID Webscale). Versions prior to 11.7.0.9 and 11.8.0.5 are vulnerable due to a flaw in the SSH cryptographic implementation that enables disclosure of sensitive information in complex Man‑in‑the‑Middle attacks. The root cause is tied to ...

CVE-2024-21983

CVE-2024-21983 affects NetApp’s StorageGRID (formerly StorageGRID Webscale). Public sources confirm versions prior to 11.8 are susceptible to a DoS where an authenticated attacker could trigger an out-of-memory condition or node reboot. The vulnerability is described consistently across multiple ...

CVE-2024-21984

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 are vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. Exploitation requires a targeted user to click a crafted link, after which an attacker could view or modify configuration settings or add/modify user accounts. Multipl...

CVE-2025-26517

StorageGRID (formerly StorageGRID Webscale) is affected in versions prior to 11.8.0.15 and prior to 11.9.0.8. The vulnerability is a privilege escalation that could allow an unauthenticated? authenticated attacker to discover Grid node names and IP addresses or modify Storage Grades. Remediation:...

CVE-2025-26516

CVE-2025-26516 affects StorageGRID (formerly StorageGRID Webscale); versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Denial of Service on the Admin node when exploited by an unauthenticated attacker. The available documents do not specify the exact root cause or exploitation details....

CVE-2025-26515

StorageGRID (formerly StorageGRID Webscale) is affected by CVE-2025-26515, a Server-Side Request Forgery (SSRF) in versions prior to 11.8.0.15 and 11.9.0.8 when Single Sign-On is not enabled. An unauthenticated attacker could change the password of any Grid Manager or Tenant Manager non-federated...

CVE-2025-26514

StorageGRID (formerly StorageGRID Webscale) is affected by a Reflected Cross-Site Scripting vulnerability in versions prior to 11.8.0.15 and 11.9.0.8. The issue could let an attacker view or modify configuration settings or add/modify user accounts, but exploitation requires the attacker to know ...

CVE-2026-22051

StorageGRID (formerly StorageGRID Webscale) is affected in versions prior to 11.9.0.13 and 12.0.0.6 by an Information Disclosure vulnerability. An authenticated user with low privileges could run arbitrary metrics queries and view metric results they should not access. The attack vector is networ...