netapp cloud manager - vulnerabilities and exploits

(subscribe to this query)

9.1

CVSSv3

Cloud Manager versions before 3.9.4 are susceptible to a vulnerability that could allow a remote malicious user to overwrite arbitrary system files.

Netapp Cloud Manager

7.5

CVSSv3

Cloud Manager versions before 3.9.4 contain an insecure Cross-Origin Resource Sharing (CORS) policy which could allow a remote malicious user to interact with Cloud Manager.

Netapp Cloud Manager

7.5

CVSSv3

Cloud Manager versions before 3.9.4 are susceptible to a vulnerability which could allow a remote malicious user to cause a Denial of Service (DoS).

Netapp Cloud Manager

7.5

CVSSv3

NetApp Cloud Manager versions before 3.9.10 are susceptible to a vulnerability which could allow a remote unauthenticated malicious user to retrieve sensitive data via the web proxy.

Netapp Cloud Manager

4.3

CVSSv3

NetApp Cloud Manager versions before 3.9.9 log sensitive information that is available only to authenticated users. Customers with auto-upgrade enabled should already be on a fixed version while customers using on-prem connectors with auto-upgrade disabled are advised to upgrade ...

Netapp Cloud Manager

4.3

CVSSv3

NetApp Cloud Manager versions before 3.9.9 log sensitive information when an Active Directory connection fails. The logged information is available only to authenticated users. Customers with auto-upgrade enabled should already be on a fixed version while customers using on-prem ...

Netapp Cloud Manager

9.8

CVSSv3

OnCommand Cloud Manager versions before 3.8.0 are susceptible to arbitrary code execution by remote attackers.

Netapp Oncommand Cloud Manager

7.8

CVSSv3

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.

Linux Linux Kernel Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller -

8.3

CVSSv3

Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful at...

Oracle Jdk 1.8.0 Oracle Jre 1.8.0 Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Snapmanager -Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Storagegrid Netapp Oncommand Insight -Netapp Active Iq Unified Manager Netapp 7-mode Transition Tool -Netapp Cloud Secure Agent -Netapp E-series Performance Analyzer -Netapp E-series Santricity Os Controller Netapp E-series Santricity Web Services -Netapp Santricity Unified Manager -

7.8

CVSSv3

In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.

Linux Linux Kernel Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Data Availability Services -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller -Netapp Hci Baseboard Management Controller H610s

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook