netapp snapcenter plug-in - vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv3

SnapCenter Plugin for VMware vSphere versions 4.6 before 4.9 are susceptible to a vulnerability which may allow authenticated unprivileged users to modify email and snapshot name settings within the VMware vSphere user interface.

Netapp Snapcenter Plug-in

2.7

CVSSv3

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenar...

Eclipse Jetty Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Snapcenter -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp Element Plug-in For Vcenter Server -Netapp Management Services For Element Software And Netapp Hci -

7.5

CVSSv3

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no eno...

Eclipse Jetty Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Snapcenter -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp Element Plug-in For Vcenter Server -Netapp Management Services For Element Software And Netapp Hci -Jenkins Jenkins

5.3

CVSSv3

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web....

2 Github repositories

2.7

CVSSv3

In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that m...

7.8

CVSSv3

SnapCenter versions 4.8 up to and including 4.9 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin user on a remote system where a SnapCenter plug-in has been installed.

Netapp Snapcenter

7.2

CVSSv3

Versions of SnapCenter 2.0 up to and including 3.0.1 allow unauthenticated remote malicious users to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0.1 and perform the mitigation steps or upgrade to 4.0 followin...

Netapp Snapcenter Server

5.3

CVSSv3

For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-281...

Eclipse Jetty Netapp Snap Creator Framework -Netapp Solidfire -Netapp Hci Management Node -Netapp E-series Santricity Web Services -Netapp Snapcenter Plug-in -Netapp E-series Santricity Os Controller Netapp Element Plug-in For Vcenter Server -Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Retail Eftlink 20.0.1 Oracle Communications Cloud Native Core Binding Support Function 1.10.0 Oracle Communications Diameter Signaling Router Oracle Communications Cloud Native Core Unified Data Repository 1.14.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.5.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0 Oracle Rest Data Services Oracle Stream Analytics Oracle Stream Analytics 19c

2 Github repositories

4.3

CVSSv3

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols...

Oracle Mysql Netapp Active Iq Unified Manager -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Netapp Snapcenter -

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook