Browse CVEs

HIGH 8.8 CVE-2026-22054 Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unau… Active Iq Config Advisor Mitigation only Fix from $1,9502026-06-03 HIGH 8.8 CVE-2026-22055 Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthor… Active Iq Onecollect Mitigation only Fix from $1,9502026-06-03 MEDIUM 5.0 CVE-2025-1181 A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/… Active Iq Unified Manager No fix yet Fix from $1,6002025-02-11 HIGH 7.4 CVE-2024-21147 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Suppo… Active Iq Unified Manager Mitigation only Fix from $1,9502024-07-16 HIGH 7.5 CVE-2024-1635 A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user … Active Iq Unified Manager Mitigation only Fix from $1,9502024-02-19 CRITICAL 9.8 CVE-2021-32292 An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sa… Active Iq Unified Manager No fix yet Fix from $2,3002023-08-22 CRITICAL 9.8 CVE-2023-1096 SnapCenter versions 4.7 prior to 4.7P2 and 4.8 prior to 4.8P1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker … Snapcenter Mitigation only Fix from $2,3002023-05-12 HIGH 8.1 CVE-2022-23241 Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could allow an aut… Clustered Data Ontap Mitigation only Fix from $1,9502022-10-19 HIGH 7.8 CVE-2021-0116 Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via loc… Cloud Backup Mitigation only Fix from $1,9502022-02-09 HIGH 7.8 CVE-2021-0117 Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local ac… Cloud Backup Mitigation only Fix from $1,9502022-02-09 HIGH 7.8 CVE-2021-0156 Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privile… Cloud Backup Mitigation only Fix from $1,9502022-02-09 MEDIUM 6.7 CVE-2021-0118 Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via loca… Cloud Backup Mitigation only Fix from $1,6002022-02-09 MEDIUM 6.6 CVE-2021-0124 Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via ph… Cloud Backup No fix yet Fix from $1,6002022-02-09 MEDIUM 6.6 CVE-2021-0125 Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via ph… Cloud Backup Mitigation only Fix from $1,6002022-02-09 MEDIUM 6.2 CVE-2021-0119 Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via ph… Cloud Backup Mitigation only Fix from $1,6002022-02-09 MEDIUM 5.5 CVE-2021-0127 Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service via local … Clustered Data Ontap Mitigation only Fix from $1,6002022-02-09 MEDIUM 5.5 CVE-2021-0145 Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure … Fas\/aff Bios Mitigation only Fix from $1,6002022-02-09 MEDIUM 5.9 CVE-2020-8577 SANtricity OS Controller Software versions 11.50.1 and higher are susceptible to a vulnerability which could allow an attacker to discover sensitive … E Series Santricity Os Controller No fix yet Fix from $1,6002020-11-06 HIGH 7.5 CVE-2020-8579 Clustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows an attacker with access to an intercluster LIF to cau… Clustered Data Ontap Mitigation only Fix from $1,9502020-10-27 MEDIUM 6.5 CVE-2020-8573 The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers (BMC) are shipped with a documented default account and password that should b… Hci H610s Firmware Mitigation only Fix from $1,6002020-06-29 HIGH 7.5 CVE-2019-5500 Certain versions of the NetApp Service Processor and Baseboard Management Controller firmware allow a remote unauthenticated attacker to cause a Deni… Fas26x0 Firmware No fix yet Fix from $1,9502020-05-11 MEDIUM 5.4 CVE-2019-17276 OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow… Oncommand System Manager Mitigation only Fix from $1,6002020-03-24 HIGH 7.2 CVE-2019-17272 All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully exploited could allow an admini… Ontap Select Deploy Administration Utility Mitigation only Fix from $1,9502019-11-21 MEDIUM 5.3 CVE-2019-5503 OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain … Oncommand Workflow Automation Mitigation only Fix from $1,6002019-09-10 CRITICAL 9.8 CVE-2019-5497 NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that could allow… Aff A700s Firmware Mitigation only Fix from $2,3002019-07-01 CRITICAL 9.8 CVE-2019-5490 Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that cou… Service Processor Mitigation only Fix from $2,3002019-03-21 CRITICAL 9.8 CVE-2018-5495 All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with systems on th… Storagegrid Webscale Mitigation only Fix from $2,3002018-11-14 HIGH 8.8 CVE-2017-12421 NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the storage controller via unspecifi… Clustered Data Ontap Mitigation only Fix from $1,9502017-09-01 HIGH 7.7 CVE-2017-12423 NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines (SVMs) via unspeci… Clustered Data Ontap Mitigation only Fix from $1,9502017-09-01 MEDIUM 6.5 CVE-2017-12422 NetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10.4.0.2 allow remote authenticated users to delete arb… Storagegrid Webscale Mitigation only Fix from $1,6002017-08-29