{"items":[{"id":"CVE-2026-22060","published":"2026-11-03T21:45:15.892Z","updated":"2026-11-05T15:58:03.045Z","title":"CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)","severity":"MEDIUM","score":6.9,"vendor":"NETAPP","product":"StorageGRID (formerly StorageGRID Webscale)","kev":false,"epss":0.00333,"kevAdded":null},{"id":"CVE-2026-22058","published":"2026-11-03T21:41:55.117Z","updated":"2026-11-05T15:57:47.822Z","title":"CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)","severity":"CRITICAL","score":9.1,"vendor":"NETAPP","product":"StorageGRID (formerly StorageGRID Webscale)","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2026-22063","published":"2026-10-27T22:20:43.242Z","updated":"2026-11-04T16:38:31.633Z","title":"CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products","severity":"MEDIUM","score":6,"vendor":"NetApp","product":"ONTAP 9","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2026-22061","published":"2026-10-09T22:02:54.449Z","updated":"2026-10-12T22:54:01.465Z","title":"CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident","severity":"HIGH","score":8.2,"vendor":"NetApp","product":"Trident","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2026-22056","published":"2026-08-28T21:45:53.370Z","updated":"2026-08-31T18:31:31.260Z","title":"CVE-2026-22056 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)","severity":"LOW","score":2.3,"vendor":"NetApp","product":"StorageGRID","kev":false,"epss":0.00295,"kevAdded":null},{"id":"CVE-2026-22049","published":"2026-07-22T18:52:14.069Z","updated":"2026-07-25T03:55:53.307Z","title":"ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID…","severity":"HIGH","score":8.7,"vendor":"NETAPP","product":"ONTAP 9","kev":false,"epss":0.00531,"kevAdded":null},{"id":"CVE-2026-22055","published":"2026-06-03T21:55:30.988Z","updated":"2026-06-04T13:12:28.392Z","title":"Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized…","severity":"MEDIUM","score":5.3,"vendor":"NETAPP","product":"Active IQ OneCollect","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2026-22054","published":"2026-06-03T21:53:48.297Z","updated":"2026-06-04T13:14:19.526Z","title":"Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized…","severity":"MEDIUM","score":5.3,"vendor":"NETAPP","product":"Active IQ Config Advisor","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2026-22051","published":"2026-04-20T21:27:36.822Z","updated":"2026-04-21T13:40:46.948Z","title":"StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful…","severity":"LOW","score":2.3,"vendor":"NETAPP","product":"StorageGRID (formerly StorageGRID Webscale)","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2026-22052","published":"2026-03-04T23:22:22.957Z","updated":"2026-03-06T18:25:24.078Z","title":"ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an…","severity":"MEDIUM","score":5.3,"vendor":"NETAPP","product":"ONTAP 9","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2026-22048","published":"2026-02-17T23:01:30.331Z","updated":"2026-02-18T13:44:08.177Z","title":"StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID…","severity":"HIGH","score":7.1,"vendor":"NETAPP","product":"StorageGRID (formerly StorageGRID Webscale)","kev":false,"epss":0.00305,"kevAdded":null},{"id":"CVE-2026-22050","published":"2026-01-12T17:15:07.484Z","updated":"2026-01-13T17:30:51.952Z","title":"ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a…","severity":"MEDIUM","score":6.9,"vendor":"NETAPP","product":"ONTAP 9","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2025-26517","published":"2025-09-19T18:53:07.531Z","updated":"2025-09-19T19:07:36.019Z","title":"CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale)","severity":"MEDIUM","score":5.4,"vendor":"NetApp","product":"StorageGRID","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2025-26516","published":"2025-09-19T18:51:12.609Z","updated":"2025-09-19T19:06:24.828Z","title":"CVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)","severity":"MEDIUM","score":5.3,"vendor":"NetApp","product":"StorageGRID","kev":false,"epss":0.0039,"kevAdded":null},{"id":"CVE-2025-26515","published":"2025-09-19T18:34:17.283Z","updated":"2025-09-19T18:46:37.919Z","title":"CVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale)","severity":"HIGH","score":7.5,"vendor":"NetApp","product":"StorageGRID","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2025-26514","published":"2025-09-19T18:31:54.948Z","updated":"2025-09-19T18:49:58.274Z","title":"CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)","severity":"MEDIUM","score":6.4,"vendor":"NetApp","product":"StorageGRID","kev":false,"epss":0.00241,"kevAdded":null},{"id":"CVE-2025-26513","published":"2025-08-07T20:29:07.044Z","updated":"2026-02-26T17:49:49.864Z","title":"The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local…","severity":"HIGH","score":7,"vendor":"NetApp","product":"SAN Host Utilities for Windows","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2025-26512","published":"2025-03-24T22:06:00.720Z","updated":"2026-02-26T19:09:15.329Z","title":"CVE-2025-26512 Privilege Escalation Vulnerability in SnapCenter","severity":"CRITICAL","score":9.9,"vendor":"NetApp","product":"SnapCenter","kev":false,"epss":0.00667,"kevAdded":null},{"id":"CVE-2025-26511","published":"2025-02-13T15:44:06.315Z","updated":"2026-01-22T19:35:19.686Z","title":"Cassandra-Lucene-Index allows bypass of Cassandra RBAC","severity":"HIGH","score":8.8,"vendor":"NetApp","product":"Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin","kev":false,"epss":0.00575,"kevAdded":null},{"id":"CVE-2024-21994","published":"2024-11-08T21:06:32.380Z","updated":"2024-11-09T15:52:48.138Z","title":"CVE-2024-21994 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)","severity":"MEDIUM","score":4.3,"vendor":"NetApp","product":"StorageGRID","kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2024-21993","published":"2024-07-09T21:26:03.404Z","updated":"2025-03-27T15:41:35.222Z","title":"Information Disclosure Vulnerability in SnapCenter","severity":"MEDIUM","score":5.7,"vendor":"NetApp","product":"SnapCenter","kev":false,"epss":0.00227,"kevAdded":null},{"id":"CVE-2024-21988","published":"2024-06-14T21:37:46.450Z","updated":"2024-11-12T20:02:20.694Z","title":"CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale)","severity":"MEDIUM","score":5.3,"vendor":"NetApp","product":"StorageGRID (formerly StorageGRID Webscale)","kev":false,"epss":0.00235,"kevAdded":null},{"id":"CVE-2024-21990","published":"2024-04-17T19:35:23.599Z","updated":"2024-08-01T22:35:34.847Z","title":"Default Privileged Account Credentials Vulnerability in ONTAP Select Deploy administration utility","severity":"MEDIUM","score":5.4,"vendor":"NetApp","product":"ONTAP Select Deploy administration utility","kev":false,"epss":0.00317,"kevAdded":null},{"id":"CVE-2024-21989","published":"2024-04-17T19:32:34.598Z","updated":"2024-08-01T22:35:34.729Z","title":"Privilege Escalation Vulnerability in ONTAP Select Deploy administration utility","severity":"HIGH","score":8.1,"vendor":"NetApp","product":"ONTAP Select Deploy administration utility","kev":false,"epss":0.00431,"kevAdded":null},{"id":"CVE-2024-21984","published":"2024-02-16T22:37:47.580Z","updated":"2025-04-24T15:11:36.844Z","title":"Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)","severity":"MEDIUM","score":5.9,"vendor":"NetApp","product":"StorageGRID","kev":false,"epss":0.00314,"kevAdded":null},{"id":"CVE-2024-21983","published":"2024-02-16T22:35:02.365Z","updated":"2024-08-01T22:35:34.510Z","title":"Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)","severity":"MEDIUM","score":6.5,"vendor":"NetApp","product":"StorageGRID","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2024-21987","published":"2024-02-16T20:27:34.000Z","updated":"2024-08-13T20:53:25.600Z","title":"Improper Authorization Vulnerability in SnapCenter","severity":"MEDIUM","score":5.4,"vendor":"NetApp","product":"SnapCenter","kev":false,"epss":0.00273,"kevAdded":null},{"id":"CVE-2023-27318","published":"2024-02-05T20:35:27.521Z","updated":"2024-08-02T12:09:42.409Z","title":"Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)","severity":"MEDIUM","score":6.5,"vendor":"NetApp","product":"StorageGRID (formerly StorageGRID Webscale)","kev":false,"epss":0.00697,"kevAdded":null},{"id":"CVE-2024-21985","published":"2024-01-26T16:01:48.168Z","updated":"2025-05-29T15:12:35.934Z","title":"Privilege Escalation Vulnerability in ONTAP 9","severity":"HIGH","score":7.6,"vendor":"NetApp","product":"ONTAP 9","kev":false,"epss":0.00332,"kevAdded":null},{"id":"CVE-2024-21982","published":"2024-01-11T23:32:14.386Z","updated":"2025-06-16T19:48:30.010Z","title":"CVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9","severity":"MEDIUM","score":4.8,"vendor":"NetApp","product":"ONTAP 9","kev":false,"epss":0.00374,"kevAdded":null},{"id":"CVE-2023-27319","published":"2023-12-21T21:15:51.018Z","updated":"2024-08-02T12:09:43.564Z","title":"CVE-2023-27319 Information Disclosure Vulnerability in ONTAP Mediator","severity":"MEDIUM","score":5.3,"vendor":"NetApp","product":"ONTAP Mediator","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2023-27317","published":"2023-12-15T22:59:11.093Z","updated":"2025-05-07T20:42:38.376Z","title":"Information Disclosure Vulnerability in ONTAP 9","severity":"MEDIUM","score":4.3,"vendor":"NetApp","product":"ONTAP 9","kev":false,"epss":0.00396,"kevAdded":null},{"id":"CVE-2023-27316","published":"2023-10-12T21:04:47.473Z","updated":"2025-02-13T16:45:21.492Z","title":"Privilege Escalation Vulnerability in SnapCenter","severity":"HIGH","score":8.8,"vendor":"NetApp","product":"SnapCenter","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2023-27314","published":"2023-10-12T18:26:47.593Z","updated":"2024-09-18T15:02:57.897Z","title":"Denial of Service Vulnerability in ONTAP 9","severity":"HIGH","score":7.5,"vendor":"NetApp","product":"ONTAP 9","kev":false,"epss":0.00852,"kevAdded":null},{"id":"CVE-2023-27313","published":"2023-10-12T18:22:28.435Z","updated":"2024-09-17T17:26:14.223Z","title":"Privilege Escalation Vulnerability in SnapCenter","severity":"HIGH","score":8.3,"vendor":"NetApp","product":"SnapCenter","kev":false,"epss":0.00593,"kevAdded":null},{"id":"CVE-2023-27312","published":"2023-10-12T18:19:16.530Z","updated":"2024-09-17T18:11:37.472Z","title":"Privilege Escalation Vulnerability in SnapCenter Plugin for VMware vSphere","severity":"MEDIUM","score":5.4,"vendor":"NetApp","product":"SnapCenter Plugin for VMware vSphere","kev":false,"epss":0.00358,"kevAdded":null},{"id":"CVE-2023-27315","published":"2023-10-12T13:56:38.513Z","updated":"2024-09-18T16:33:01.296Z","title":"Information Disclosure Vulnerability in SnapGathers","severity":"MEDIUM","score":6.5,"vendor":"NetApp","product":"SnapGathers","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2020-8573","published":"2020-06-29T14:00:38.000Z","updated":"2024-08-04T10:03:45.787Z","title":"The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers (BMC) are shipped with a documented default account and password that should be changed…","severity":"MEDIUM","score":6.5,"vendor":"NetApp","product":"NetApp HCI Baseboard Management Controller (BMC) HCI H610C, NetApp HCI Baseboard Management Controller (BMC) HCI H615C, NetApp HCI Baseboard Management Controller (BMC) HCI H610S","kev":false,"epss":0.01282,"kevAdded":null},{"id":"CVE-2020-8571","published":"2020-03-13T15:10:08.000Z","updated":"2024-08-04T10:03:46.377Z","title":"StorageGRID (formerly StorageGRID Webscale) versions 10.0.0 through 11.3 prior to 11.2.0.8 and 11.3.0.4 are susceptible to a vulnerability which allows an…","severity":"HIGH","score":7.5,"vendor":"NetApp","product":"StorageGRID (formerly StorageGRID Webscale)","kev":false,"epss":0.01823,"kevAdded":null},{"id":"CVE-2019-17275","published":"2020-02-26T17:44:06.000Z","updated":"2024-08-05T01:33:17.334Z","title":"OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers.","severity":"CRITICAL","score":9.8,"vendor":"NetApp","product":"OnCommand Cloud Manager","kev":false,"epss":0.02817,"kevAdded":null},{"id":"CVE-2019-17274","published":"2020-02-26T17:38:35.000Z","updated":"2024-08-05T01:33:17.371Z","title":"NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default account enabled that…","severity":"HIGH","score":7.8,"vendor":"NetApp","product":"NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller","kev":false,"epss":0.00581,"kevAdded":null},{"id":"CVE-2019-17273","published":"2020-01-30T17:47:00.000Z","updated":"2024-08-05T01:33:17.415Z","title":"E-Series SANtricity OS Controller Software version 11.60.0 is susceptible to a vulnerability which allows an attacker to cause a Denial of Service (DoS) in…","severity":"MEDIUM","score":6.5,"vendor":"NetApp","product":"E-Series SANtricity OS Controller Software","kev":false,"epss":0.00713,"kevAdded":null},{"id":"CVE-2019-17272","published":"2019-11-21T15:40:03.000Z","updated":"2024-08-05T01:33:17.328Z","title":"All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully exploited could allow an administrative…","severity":"HIGH","score":7.2,"vendor":"NetApp","product":"ONTAP Select Deploy administration utility","kev":false,"epss":0.01262,"kevAdded":null},{"id":"CVE-2019-5509","published":"2019-11-21T15:33:19.000Z","updated":"2024-08-04T20:01:50.830Z","title":"ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited…","severity":"CRITICAL","score":9.8,"vendor":"NetApp","product":"ONTAP Select Deploy administration utility","kev":false,"epss":0.02275,"kevAdded":null},{"id":"CVE-2019-5503","published":"2019-09-10T15:50:41.000Z","updated":"2024-08-04T20:01:51.557Z","title":"OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive…","severity":"MEDIUM","score":5.3,"vendor":"NetApp","product":"OnCommand Workflow Automation","kev":false,"epss":0.00694,"kevAdded":null},{"id":"CVE-2019-5501","published":"2019-08-02T14:55:38.000Z","updated":"2024-08-04T20:01:51.442Z","title":"Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthenticated remote attackers.","severity":"HIGH","score":7.5,"vendor":"NetApp","product":"Data ONTAP operating in 7-Mode","kev":false,"epss":0.01981,"kevAdded":null},{"id":"CVE-2019-5493","published":"2019-08-02T14:37:02.000Z","updated":"2024-08-04T19:54:53.494Z","title":"Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 are susceptible to a vulnerability which discloses information to an unauthenticated attacker. A…","severity":"HIGH","score":7.5,"vendor":"Netapp","product":"Data ONTAP operating in 7-Mode","kev":false,"epss":0.01425,"kevAdded":null},{"id":"CVE-2019-5497","published":"2019-07-01T20:12:24.000Z","updated":"2024-08-04T20:01:50.681Z","title":"NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that could allow…","severity":"CRITICAL","score":9.8,"vendor":"NetApp","product":"AFF A700s Baseboard Management Controller","kev":false,"epss":0.02866,"kevAdded":null},{"id":"CVE-2019-5496","published":"2019-05-10T19:24:21.000Z","updated":"2024-08-04T20:01:50.651Z","title":"Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive…","severity":"HIGH","score":7.5,"vendor":"NetApp","product":"OnCommand Insight","kev":false,"epss":0.00703,"kevAdded":null},{"id":"CVE-2019-5495","published":"2019-05-10T19:12:23.000Z","updated":"2024-08-04T19:54:53.487Z","title":"OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an…","severity":"HIGH","score":7.5,"vendor":"NetApp","product":"OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above","kev":false,"epss":0.01429,"kevAdded":null},{"id":"CVE-2019-5494","published":"2019-05-10T18:55:44.000Z","updated":"2024-08-04T19:54:53.577Z","title":"OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which could allow an attacker to obtain…","severity":"HIGH","score":7.5,"vendor":"NetApp","product":"OnCommand Unified Manager 7-Mode","kev":false,"epss":0.00703,"kevAdded":null},{"id":"CVE-2018-5482","published":"2019-03-04T23:00:00.000Z","updated":"2024-09-17T00:16:19.973Z","title":"NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in…","severity":"MEDIUM","score":5.3,"vendor":"NetApp","product":"SnapCenter Server","kev":false,"epss":0.00926,"kevAdded":null},{"id":"CVE-2017-15515","published":"2019-03-04T22:00:00.000Z","updated":"2024-09-17T00:26:02.108Z","title":"NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into…","severity":"MEDIUM","score":4.8,"vendor":"NetApp","product":"SnapCenter Server","kev":false,"epss":0.00676,"kevAdded":null},{"id":"CVE-2019-5491","published":"2019-02-27T17:00:00.000Z","updated":"2024-09-16T17:08:32.691Z","title":"Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an…","severity":"HIGH","score":7.5,"vendor":"NetApp","product":"Clustered Data ONTAP","kev":false,"epss":0.019,"kevAdded":null},{"id":"CVE-2018-5499","published":"2019-02-12T20:00:00.000Z","updated":"2024-09-16T23:06:11.957Z","title":"ATTO FibreBridge 7500N firmware version 2.95 is susceptible to a vulnerability which allows attackers to cause a Denial of Service (DoS).","severity":"HIGH","score":7.5,"vendor":"NetApp","product":"ATTO FibreBridge 7500N","kev":false,"epss":0.01321,"kevAdded":null},{"id":"CVE-2018-5498","published":"2019-02-01T16:00:00.000Z","updated":"2024-09-17T01:41:44.338Z","title":"Clustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows remote authenticated attackers to cause a Denial of Service (DoS)…","severity":"MEDIUM","score":4.4,"vendor":"NetApp","product":"Clustered Data ONTAP","kev":false,"epss":0.01201,"kevAdded":null},{"id":"CVE-2018-5497","published":"2019-01-24T20:00:00.000Z","updated":"2024-09-17T01:31:48.583Z","title":"Clustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a vulnerability which discloses sensitive information to an unauthorized…","severity":"MEDIUM","score":4.4,"vendor":"NetApp","product":"Clustered Data ONTAP","kev":false,"epss":0.00368,"kevAdded":null},{"id":"CVE-2018-5481","published":"2019-01-07T15:00:00.000Z","updated":"2024-08-05T05:40:49.842Z","title":"OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to…","severity":"HIGH","score":7.4,"vendor":"NetApp","product":"OnCommand Unified Manager for 7-Mode (core package)","kev":false,"epss":0.00648,"kevAdded":null},{"id":"CVE-2018-5496","published":"2018-12-04T20:00:00.000Z","updated":"2024-08-05T05:40:49.836Z","title":"Data ONTAP operating in 7-Mode versions prior to 8.2.5P2 are susceptible to a vulnerability which discloses sensitive information to an unauthorized user.","severity":"MEDIUM","score":4.4,"vendor":"NetApp","product":"Data ONTAP operating in 7-Mode","kev":false,"epss":0.00386,"kevAdded":null},{"id":"CVE-2018-5495","published":"2018-11-14T19:00:00.000Z","updated":"2024-08-05T05:40:50.566Z","title":"All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with systems on the same…","severity":"CRITICAL","score":9.8,"vendor":"NetApp","product":"StorageGRID Webscale","kev":false,"epss":0.01591,"kevAdded":null},{"id":"CVE-2018-5492","published":"2018-10-04T13:00:00.000Z","updated":"2024-09-17T01:21:51.777Z","title":"NetApp E-Series SANtricity OS Controller Software 11.30 and later version 11.30.5 is susceptible to unauthenticated remote code execution.","severity":"CRITICAL","score":9.8,"vendor":"NetApp","product":"E-Series SANtricity OS Controller Software","kev":false,"epss":0.02895,"kevAdded":null},{"id":"CVE-2018-5490","published":"2018-08-03T19:00:00.000Z","updated":"2024-09-16T17:22:52.478Z","title":"Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than \"read-only\"…","severity":"HIGH","score":8.8,"vendor":"NetApp","product":"Clustered Data ONTAP","kev":false,"epss":0.00861,"kevAdded":null},{"id":"CVE-2018-5489","published":"2018-08-03T13:00:00.000Z","updated":"2024-09-17T01:51:07.588Z","title":"NetApp 7-Mode Transition Tool allows users with valid credentials to access functions and information which may have been intended to be restricted to…","severity":"MEDIUM","score":6.5,"vendor":"NetApp","product":"7-Mode Transition Tool","kev":false,"epss":0.00752,"kevAdded":null},{"id":"CVE-2017-7568","published":"2018-06-22T15:00:00.000Z","updated":"2024-09-17T01:45:51.420Z","title":"NetApp OnCommand Unified Manager for 7-Mode (core package) versions prior to 5.2.3 may disclose sensitive LDAP account information to authenticated users when…","severity":"MEDIUM","score":5.3,"vendor":"NetApp","product":"OnCommand Unified Manager for 7-Mode (core package)","kev":false,"epss":0.01275,"kevAdded":null},{"id":"CVE-2018-5488","published":"2018-06-13T20:00:00.000Z","updated":"2024-09-16T23:01:43.380Z","title":"NetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through 2.12.X000.0002 and SANtricity Storage Manager 11.30.0X00.0004 through 11.42.0X00.0001 ship…","severity":"CRITICAL","score":9.8,"vendor":"NetApp","product":"SANtricity Products","kev":false,"epss":0.0378,"kevAdded":null},{"id":"CVE-2018-5487","published":"2018-05-24T14:00:00.000Z","updated":"2024-09-16T22:30:40.380Z","title":"NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service bound to…","severity":"CRITICAL","score":9.8,"vendor":"NetApp","product":"OnCommand Unified Manager for Linux","kev":false,"epss":0.02841,"kevAdded":null},{"id":"CVE-2018-5485","published":"2018-05-24T14:00:00.000Z","updated":"2024-09-16T23:26:48.902Z","title":"NetApp OnCommand Unified Manager for Windows versions 7.2 through 7.3 are susceptible to a vulnerability which could lead to a privilege escalation attack.","severity":"HIGH","score":7.8,"vendor":"NetApp","product":"OnCommand Unified Manager for Windows","kev":false,"epss":0.00407,"kevAdded":null},{"id":"CVE-2018-5486","published":"2018-04-25T21:00:00.000Z","updated":"2024-09-16T22:35:03.390Z","title":"NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol (JDWP) enabled which allows unauthorized local…","severity":"HIGH","score":7.8,"vendor":"NetApp","product":"OnCommand Unified Manager for Linux","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2017-15519","published":"2018-03-06T20:00:00.000Z","updated":"2024-09-16T18:23:26.580Z","title":"Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services.…","severity":"HIGH","score":7.2,"vendor":"NetApp","product":"SnapCenter","kev":false,"epss":0.01178,"kevAdded":null},{"id":"CVE-2017-15518","published":"2018-02-23T23:00:00.000Z","updated":"2024-09-17T00:25:51.381Z","title":"All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 log a privileged database user account password. All users…","severity":"HIGH","score":7.8,"vendor":"NetApp","product":"OnCommand API Services and NetApp Service Level Manager","kev":false,"epss":0.00339,"kevAdded":null},{"id":"CVE-2016-6904","published":"2017-12-11T15:00:00.000Z","updated":"2024-09-17T00:35:49.170Z","title":"Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an…","severity":"HIGH","score":8.1,"vendor":"NetApp","product":"VASA Provider for Clustered Data ONTAP","kev":false,"epss":0.01178,"kevAdded":null},{"id":"CVE-2017-15517","published":"2017-11-17T00:00:00.000Z","updated":"2024-09-17T02:11:20.098Z","title":"AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. All users are urged to move to a…","severity":"MEDIUM","score":5.5,"vendor":"NetApp","product":"AltaVault OST Plug-in","kev":false,"epss":0.0037,"kevAdded":null},{"id":"CVE-2017-15516","published":"2017-11-16T22:00:00.000Z","updated":"2024-09-16T23:00:56.063Z","title":"NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an…","severity":"HIGH","score":8.8,"vendor":"NetApp","product":"SnapCenter Server","kev":false,"epss":0.00561,"kevAdded":null},{"id":"CVE-2017-11461","published":"2017-11-09T19:00:00.000Z","updated":"2024-09-17T00:26:39.580Z","title":"NetApp OnCommand Unified Manager for 7-mode (core package) versions prior to 5.2.1 are susceptible to a clickjacking or \"UI redress attack\" which could be used…","severity":"MEDIUM","score":4.3,"vendor":"NetApp","product":"OnCommand Unified Manager","kev":false,"epss":0.01018,"kevAdded":null}]}