Netapp Sårbarheter

Tidslinje

Typ

Produkt

NetApp Clustered Data ONTAP28
NetApp Data Ontap8
NetApp StorageGRID7
NetApp E-Series SANtricity OS Controller Software7
NetApp SnapCenter6

Åtgärd

Official Fix104
Temporary Fix0
Workaround0
Unavailable0
Not Defined37

Utnyttjbarhet

High0
Functional0
Proof-of-Concept1
Unproven0
Not Defined140

Åtkomstvektor

Not Defined0
Physical1
Local11
Adjacent24
Network105

Autentisering

Not Defined0
High3
Low74
None64

Användarinteraktion

Not Defined0
Required12
None129

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤417
≤518
≤632
≤742
≤816
≤914
≤102

CVSSv3 Temp

≤10
≤20
≤31
≤418
≤518
≤632
≤742
≤815
≤913
≤102

VulDB

≤10
≤20
≤34
≤428
≤526
≤636
≤725
≤819
≤91
≤102

NVD

≤10
≤20
≤30
≤44
≤58
≤613
≤718
≤839
≤913
≤1015

CNA

≤10
≤20
≤30
≤40
≤52
≤65
≤73
≤82
≤93
≤100

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k42
<2k62
<5k37
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja idag

<1k139
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

🔴 CTI Aktiviteter

Affected Products (55): 7-Mode Transition Tool (1), AFF A400 Baseboard Management Controller (1), AFF A700s Baseboard Management Controller (1), Active IQ Unified Manager (2), Active IQ Unified Manager for VMware (2), Active IQ Unified Manager for VMware Windows (1), Active IQ Unified Manager for VMware vSphere (1), AltaVault (1), Baseboard Management Controller (1), Blue XP Connector (1), Cloud Manager (6), Clustered Data ONTAP (28), Data ONTAP (3), Data Ontap (8), E-Series SANtricity OS Controller Software (7), Element OS (1), Element Plug-In for vCenter Server (1), Element Software (2), FAS 8300 (1), FAS 8700 (1), HCI Compute Node (1), HCI H610S Baseboard Management Controller (1), Management Node (1), Management Services (1), ONTAP (5), ONTAP Mediator (1), ONTAP Select Deploy Administration Utility (4), ONTAP Select Deploy administration utility (1), OnCommand API Services (2), OnCommand Balance (2), OnCommand Insight (4), OnCommand Performance Manager (1), OnCommand System Manager (5), OnCommand Unified Manager (5), OnCommand Unified Manager Core Package (3), OnCommand Unified Manager for 7-Mode (1), OnCommand Unified Manager for 7-mode (2), OnCommand Unified Manager for Clustered Data ONTAP (2), OnCommand Workflow Automation (2), SANtricity OS Controller Software (2), SANtricity Storage Manager (1), SANtricity Web Services Proxy (1), Service Level Manager (1), Service Processor (2), SnapCenter (6), SnapCenter Plugin (1), SnapCenter Server (5), Snap Creator Framework (2), SnapDrive (1), SnapGathers (1), StorageGRID (7), StorageGRID Webscale (3), System Manager (1), Virtual Desktop Service (1), Virtual Storage Console (1)

Link to Vendor Website: https://www.netapp.com/

PubliceradBaseTempSårbarhetProdUtnRemEPSSCTICVE
17/04/20247.27.2NetApp ONTAP Select Deploy administration utility privilegier eskaleringOkändNot DefinedNot Defined0.000430.47CVE-2024-21989
17/04/20245.95.9NetApp ONTAP Select Deploy Administration Utility svag autentiseringOkändNot DefinedNot Defined0.000430.17CVE-2024-21990
17/02/20245.15.0NetApp StorageGRID cross site scriptingOkändNot DefinedOfficial Fix0.000430.02CVE-2024-21984
17/02/20246.56.3NetApp StorageGRID förnekande av tjänstenOkändNot DefinedOfficial Fix0.000430.03CVE-2024-21983
17/02/20244.84.7NetApp SnapCenter Log Setting privilegier eskaleringOkändNot DefinedOfficial Fix0.000430.03CVE-2024-21987
06/02/20246.86.8NetApp StorageGRID LDR Service förnekande av tjänstenOkändNot DefinedNot Defined0.000460.00CVE-2023-27318
26/01/20246.96.8NetApp ONTAP REST API privilegier eskaleringOkändNot DefinedOfficial Fix0.000440.00CVE-2024-21985
12/01/20244.64.6NetApp ONTAP Object-Store Profiler Command privilegier eskaleringOkändNot DefinedOfficial Fix0.000490.02CVE-2024-21982
22/12/20235.35.2NetApp ONTAP Mediator REST API informationsgivningOkändNot DefinedOfficial Fix0.000520.00CVE-2023-27319
16/12/20233.73.7NetApp ONTAP SAS-attached FIPS 140-2 Drive informationsgivningOkändNot DefinedNot Defined0.000520.00CVE-2023-27317
13/10/20238.68.5NetApp SnapCenter privilegier eskaleringOkändNot DefinedOfficial Fix0.000500.00CVE-2023-27313
13/10/20235.35.2NetApp SnapCenter Plugin Setting privilegier eskaleringOkändNot DefinedOfficial Fix0.000450.02CVE-2023-27312
13/10/20237.67.5NetApp SnapCenter Plug-In privilegier eskaleringOkändNot DefinedOfficial Fix0.000430.00CVE-2023-27316
13/10/20236.46.3NetApp ONTAP HTTP Service förnekande av tjänstenOkändNot DefinedOfficial Fix0.000810.07CVE-2023-27314
12/10/20235.15.1NetApp SnapGathers privilegier eskaleringOkändNot DefinedOfficial Fix0.000420.02CVE-2023-27315
27/05/20233.53.4NetApp Blue XP Connector informationsgivningOkändNot DefinedOfficial Fix0.000470.02CVE-2023-27311
13/05/20238.58.4NetApp SnapCenter Remote Code ExecutionOkändNot DefinedOfficial Fix0.001400.00CVE-2023-1096
02/03/20235.55.4NetApp StorageGRID Local Distribution Router förnekande av tjänstenOkändNot DefinedOfficial Fix0.000780.00CVE-2022-38734
01/03/20233.63.5NetApp Active IQ Unified Manager for VMware cross site scriptingOkändNot DefinedOfficial Fix0.000530.00CVE-2022-23239
01/03/20236.05.9NetApp Active IQ Unified Manager for VMware EMS Subscription privilegier eskaleringOkändNot DefinedOfficial Fix0.000530.00CVE-2022-23240
21/12/20227.47.4NetApp OnCommand Insight Data Warehouse svag autentiseringOkändNot DefinedNot Defined0.000780.00CVE-2022-38733
20/10/20227.27.2NetApp Clustered Data ONTAP SnapLock Privilege EscalationOkändNot DefinedNot Defined0.001240.02CVE-2022-23241
30/09/20226.05.9NetApp SnapCenter Content Security Policy Privilege EscalationOkändNot DefinedOfficial Fix0.001450.00CVE-2022-38732
26/08/20224.44.3NetApp Active IQ Unified Manager AutoSupport Telemetry informationsgivningOkändNot DefinedOfficial Fix0.000720.00CVE-2022-23235
11/08/20226.96.9NetApp StorageGRID Remote Code ExecutionOkändNot DefinedNot Defined0.001290.02CVE-2022-23238

116 fler poster visas inte

Do you need the next level of professionalism?

Upgrade your account now!