netapp snap creator framework - vulnerabilities and exploits

Cross-site request forgery (CSRF) vulnerability in NetApp Snap Creator Framework prior to 4.3.0P1 allows remote malicious users to hijack the authentication of users for requests that have unspecified impact via unknown vectors.

Netapp Snap Creator Framework

4.6

CVSSv3

NetApp Snap Creator Framework prior to 4.3P1 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors.

Netapp Snap Creator Framework

7.5

CVSSv3

NetApp Snap Creator Framework prior to 4.3.1 discloses sensitive information which could be viewed by an unauthorized user.

Netapp Snap Creator Framework

9.1

CVSSv3

An XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser and is known to affect Nutch versions < 1.18. XML external entity injection (also known as XXE) is a web security vulnerability that allows an malicious user to interfere with an application�...

Apache Nutch Netapp Snap Creator Framework -

5.3

CVSSv3

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first char...

Vmware Spring Framework Netapp Snap Creator Framework -Netapp Snapmanager -Netapp Active Iq Unified Manager -Netapp Metrocluster Tiebreaker -Netapp Cloud Secure Agent -Oracle Mysql Enterprise Monitor

1 Github repository

6.6

CVSSv3

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.

Qos Logback 1.3.0 Qos Logback Redhat Satellite 6.0 Netapp Snap Creator Framework -Netapp Service Level Manager -Netapp Cloud Manager -Siemens Sinec Nms

7 Github repositories

6.1

CVSSv3

jquery before 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be...

Jquery Jquery Oracle Peoplesoft Enterprise Peopletools 8.58 Netapp Snap Creator Framework -Netapp Cloud Backup -Netapp Oncommand System Manager Netapp Active Iq Unified Manager -Juniper Junos 21.2

3 Github repositories

4.3

CVSSv3

In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.

Vmware Spring Framework Netapp Snap Creator Framework -Netapp Snapcenter -Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Metrocluster Tiebreaker -Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0

2 Github repositories

5.3

CVSSv3

For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the we...

Eclipse Jetty Debian Debian Linux 9.0 Debian Debian Linux 10.0 Oracle Rest Data Services Oracle Communications Cloud Native Core Policy 1.14.0 Netapp Snap Creator Framework -Netapp Hci -Netapp Active Iq Unified Manager -Netapp Management Services For Element Software -

2 Github repositories

8.1

CVSSv3

The TLS protocol 1.2 and previous versions supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and ser...

Ietf Transport Layer Security Netapp Snap Creator Framework -Netapp Data Ontap Edge -Netapp Snapdrive -Netapp Snapmanager -Netapp Smi-s Provider -Netapp Host Agent -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire \\& Hci Management Node -Netapp Snapprotect -Netapp Oncommand Shift -Netapp Plug-in For Symantec Netbackup -Netapp System Setup -

Get Started

netapp snap creator framework - vulnerabilities and exploits

Vulmon Search

About

Products

Connect