Snapcenter Server (Netapp) - vulnerabilities (CVEs)

23 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2020-10-21. Vendor: Netapp.

CVEs of Snapcenter Server

• CVE-2020-14800 - CVSS 6.5 (medium), 2020-10-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.21 and…
• CVE-2020-14791 - CVSS 2.2 (low), 2020-10-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.21 and prior. Difficult to exploit…
• CVE-2020-14799 - CVSS 4.9 (medium), 2020-10-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.20 and…
• CVE-2020-14790 - CVSS 4.9 (medium), 2020-10-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and…
• CVE-2020-14794 - CVSS 4.9 (medium), 2020-10-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily…
• CVE-2020-14789 - CVSS 4.9 (medium), 2020-10-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and…
• CVE-2020-14793 - CVSS 4.9 (medium), 2020-10-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.49 and prior, 5.7.31…
• CVE-2020-14786 - CVSS 4.9 (medium), 2020-10-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.21 and prior. Easily…
• CVE-2020-14785 - CVSS 4.9 (medium), 2020-10-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily…
• CVE-2020-14777 - CVSS 4.9 (medium), 2020-10-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily…
• CVE-2020-14775 - CVSS 6.5 (medium), 2020-10-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior.…
• CVE-2020-14773 - CVSS 4.9 (medium), 2020-10-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily…
• CVE-2020-14769 - CVSS 6.5 (medium), 2020-10-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.49 and prior, 5.7.31…
• CVE-2020-14672 - CVSS 4.9 (medium), 2020-10-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 5.6.49 and prior,…
• CVE-2020-11023 - CVSS 6.9 (medium), 2020-04-29: In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing…
• CVE-2018-5482 - CVSS 5.3 (medium), 2019-03-04: NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie…
• CVE-2017-15515 - CVSS 4.8 (medium), 2019-03-04: NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into…
• CVE-2018-8014 - CVSS 9.8 (critical), 2018-05-16: The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and…
• CVE-2017-15519 - CVSS 7.2 (high), 2018-03-06: Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services.…
• CVE-2017-15516 - CVSS 8.8 (high), 2017-11-16: NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an…
• CVE-2016-8610 - CVSS 7.5 (high), 2017-11-13: A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT…
• CVE-2015-7887 - CVSS 8.1 (high), 2017-08-07: NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups.
• CVE-2016-1502 - CVSS 7.3 (high), 2017-02-07: NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors.