Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

netapp element plug-in for vcenter server - vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3

CVE-2019-5492

Element Plug-in for vCenter Server versions before 4.2.3 may disclose sensitive account information to an unauthenticated attacker. NetApp HCI Compute Node versions before 1.4P2 bundle affected versions of Element Plug-in for vCenter Server.
Netapp Hyper Converged Infrastructure Compute NodeNetapp Element Plug-in For Vcenter Server
9.8
CVSSv3

CVE-2021-26987

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions before 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Managemen...
Vmware Spring BootNetapp Element Plug-in For Vcenter ServerNetapp Management Services For Element Software And Netapp HciNetapp Solidfire & Hci Management Node
2.7
CVSSv3

CVE-2022-2047

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenar...
Eclipse JettyDebian Debian Linux 10.0Debian Debian Linux 11.0Netapp Element Plug-in For Vcenter Server -Netapp Management Services For Element Software And Netapp Hci -Netapp Snapcenter -Netapp Solidfire & Hci Storage Node -Netapp Hci Compute Node -
7.5
CVSSv3

CVE-2022-2048

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no eno...
Eclipse JettyDebian Debian Linux 10.0Debian Debian Linux 11.0Netapp Element Plug-in For Vcenter Server -Netapp Management Services For Element Software And Netapp Hci -Netapp Snapcenter -Netapp Solidfire & Hci Storage Node -Netapp Hci Compute Node -Jenkins Jenkins
5.3
CVSSv3

CVE-2020-27223

In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high ...
Eclipse JettyEclipse Jetty 9.4.6Eclipse Jetty 9.4.36Eclipse Jetty 10.0.0Eclipse Jetty 11.0.0Apache Nifi 1.13.0Apache Spark 3.1.1Netapp E-series Santricity Os ControllerNetapp E-series Santricity Web Services -Netapp Element Plug-in For Vcenter Server -Netapp Hci -Netapp Hci Management Node -
5.3
CVSSv3

CVE-2021-28164

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web....
Eclipse Jetty 9.4.37Eclipse Jetty 9.4.38Netapp Cloud Manager -Netapp E-series Performance Analyzer -Netapp E-series Santricity Os ControllerNetapp E-series Santricity Web Services -Netapp Element Plug-in For Vcenter Server -Netapp Santricity Cloud Connector -Netapp Snapcenter -Netapp Snapcenter Plug-in -Netapp Storage Replication Adapter For Clustered Data OntapNetapp Vasa Provider For Clustered Data Ontap
3.5
CVSSv3

CVE-2021-34428

For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this c...
Eclipse JettyDebian Debian Linux 10.0Netapp Active Iq Unified Manager -Netapp E-series Santricity Os ControllerNetapp E-series Santricity Web Services -Netapp Element Plug-in For Vcenter Server -Netapp Santricity Cloud Connector -Netapp Snap Creator Framework -Netapp Snapmanager -Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Communications Element Manager 8.2.2Oracle Communications Services Gatekeeper 7.0
2.7
CVSSv3

CVE-2021-28163

In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that m...
Eclipse JettyEclipse Jetty 10.0.0Eclipse Jetty 10.0.1Eclipse Jetty 11.0.0Eclipse Jetty 11.0.1Fedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Apache IgniteApache Solr 8.8.1Netapp Cloud Manager -Netapp E-series Performance Analyzer -
5.3
CVSSv3

CVE-2021-34429

For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-281...
Eclipse JettyNetapp E-series Santricity Os ControllerNetapp E-series Santricity Web Services -Netapp Element Plug-in For Vcenter Server -Netapp Hci Management Node -Netapp Snap Creator Framework -Netapp Snapcenter Plug-in -Netapp Solidfire -Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.5.0Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-23629CVE-2024-52331CVE-2025-0693precious metals charts and widgets for wordpressneofixsimple downloads listCVE-2025-23544CVE-2025-21298client sidememory leakCVE-2019-5418XSSdeebot x5 pro plus
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook