Vulnerabilities (CVE)

Filtered by vendor Netapp Subscribe
Total 2289 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-4341 1 Netapp 1 Clustered Data Ontap 2017-02-24 5.0 MEDIUM 7.5 HIGH
NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors.
CVE-2016-1502 1 Netapp 1 Snapcenter Server 2017-02-24 7.5 HIGH 7.3 HIGH
NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors.
CVE-2016-6667 1 Netapp 1 Oncommand Unified Manager For Clustered Data Ontap 2017-02-24 7.5 HIGH 9.8 CRITICAL
NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2016-6495 1 Netapp 1 Data Ontap 2017-02-24 4.3 MEDIUM 5.9 MEDIUM
NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access.
CVE-2016-5711 1 Netapp 1 Virtual Storage Console For Vmware Vsphere 2017-02-24 6.8 MEDIUM 9.8 CRITICAL
NetApp Virtual Storage Console for VMware vSphere before 6.2.1 uses a non-unique certificate, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors.
CVE-2016-7171 1 Netapp 1 Netapp Plug-in 2016-12-23 6.8 MEDIUM 5.6 MEDIUM
NetApp Plug-in for Symantec NetBackup prior to version 2.0.1 makes use of a non-unique server certificate, making it vulnerable to impersonation.
CVE-2015-3292 1 Netapp 1 Oncommand Workflow Automation 2016-12-03 10.0 HIGH N/A
The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2014-9354 1 Netapp 1 Oncommand Balance 2015-02-09 4.0 MEDIUM N/A
NetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via unspecified vectors related to cleartext storage.
CVE-2014-9353 1 Netapp 1 Oncommand Balance 2015-02-06 10.0 HIGH N/A
NetApp OnCommand Balance before 4.2P2 contains a "default privileged account," which allows remote attackers to gain privileges via unspecified vectors.