Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netapp clustered data ontap 9.6 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2017-10346
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network ...
Oracle Jdk 1.9.0Oracle Jre 1.9.0Oracle Jdk 1.8.0Oracle Jdk 1.7.0Oracle Jdk 1.6.0Oracle Jre 1.6.0Oracle Jre 1.8.0Oracle Jre 1.7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Tus 7.4Redhat Enterprise Linux Eus 7.4Redhat Enterprise Linux Eus 7.5Redhat Satellite 5.8Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux Eus 7.6
5.5
CVSSv2
CVE-2020-8576
Clustered Data ONTAP versions before 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data or disclosure of sensitive information.
Netapp Clustered Data Ontap 9.3Netapp Clustered Data Ontap 9.5Netapp Clustered Data Ontap 9.6Netapp Clustered Data Ontap 9.7Netapp Clustered Data Ontap
5
CVSSv2
CVE-2021-27005
Clustered Data ONTAP versions 9.6 and higher before 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allow a remote malicious user to cause a crash of the httpd server.
Netapp Ontap System Manager 9.7Netapp Ontap System Manager 9.8Netapp Ontap System ManagerNetapp Ontap System Manager 9.9.12
5
CVSSv2
CVE-2019-10246
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information revea...
Eclipse Jetty 9.2.27Eclipse Jetty 9.3.26Eclipse Jetty 9.4.16Netapp Snap Creator Framework -Netapp Snapcenter -Netapp Oncommand System ManagerNetapp Snapmanager -Netapp Storage Services Connector -Netapp Virtual Storage ConsoleNetapp Virtual Storage Console 9.6Netapp Storage Replication Adapter For Clustered Data OntapNetapp Storage Replication Adapter For Clustered Data Ontap 9.6Netapp Vasa Provider For Clustered Data OntapNetapp Vasa Provider For Clustered Data Ontap -Netapp Element -Oracle Retail Xstore Point Of Service 15.0Oracle Flexcube Private Banking 12.1.0Oracle Retail Xstore Point Of Service 7.1Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Core Banking 5.2.0Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1
4.4
CVSSv2
CVE-2017-10125
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks ...
Oracle Jdk 1.8.0Oracle Jdk 1.7.0Oracle Jre 1.7.0Oracle Jre 1.8.0Netapp Cloud Backup -Netapp Oncommand Balance -Netapp Element Software -Netapp Steelstore Cloud Integrated Storage -Netapp Snapmanager -Netapp Oncommand Insight -Netapp Virtual Storage ConsoleNetapp E-series Santricity Storage Manager -Netapp Oncommand Unified Manager -Netapp Active Iq Unified ManagerNetapp Vasa Provider For Clustered Data OntapNetapp Oncommand Shift -Netapp Oncommand Performance Manager -Netapp Plug-in For Symantec Netbackup -Netapp E-series Santricity Os ControllerNetapp Storage Replication Adapter For Clustered Data OntapNetapp Oncommand Unified ManagerNetapp Vasa Provider For Clustered Data Ontap 6.0
4.3
CVSSv2
CVE-2021-27003
Clustered Data ONTAP versions before 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack.
Netapp Clustered Data OntapNetapp Clustered Data Ontap 9.5Netapp Clustered Data Ontap 9.6Netapp Clustered Data Ontap 9.7Netapp Clustered Data Ontap 9.8
4.3
CVSSv2
CVE-2019-5506
Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-in-the-middle attacks.
Netapp Clustered Data Ontap 9.6Netapp Clustered Data Ontap
4.3
CVSSv2
CVE-2019-10092
In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server ...
Apache Http ServerOpensuse Leap 15.0Opensuse Leap 15.1Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Redhat Software Collection 1.0Fedoraproject Fedora 30Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Netapp Clustered Data Ontap 9.6Netapp Clustered Data OntapOracle Enterprise Manager Ops Center 12.3.3Oracle Secure Global Desktop 5.4Oracle Enterprise Manager Ops Center 12.4.0Oracle Secure Global Desktop 5.5Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.1.0Oracle Communications Element Manager 8.0.0
2.1
CVSSv2
CVE-2021-27001
Clustered Data ONTAP versions 9.x before 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an authenticated privileged local malicious user to arbitrarily modify Compliance-mode WORM data prior to the end of the retention period.
Netapp Clustered Data Ontap 9.6Netapp Clustered Data Ontap 9.5Netapp Clustered Data Ontap 9.7Netapp Clustered Data Ontap 9.8Netapp Clustered Data OntapNetapp Clustered Data Ontap 9.9.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook