Netapp - vulnerabilities (CVEs)
2529 CVEs in 422 products, 2 in the last 30 days, newest from 2026-10-27.
Products
- Oncommand Insight - 973 CVEs
- Active Iq Unified Manager - 850 CVEs
- Oncommand Workflow Automation - 744 CVEs
- Snapcenter - 576 CVEs
- Cloud Backup - 349 CVEs
- H700s Firmware - 294 CVEs
- H300s Firmware - 293 CVEs
- H410s Firmware - 293 CVEs
- H500s Firmware - 293 CVEs
- H410c Firmware - 241 CVEs
- E-series Santricity Os Controller - 232 CVEs
- Steelstore Cloud Integrated Storage - 216 CVEs
- Solidfire - 192 CVEs
- Hci Management Node - 182 CVEs
- Ontap Select Deploy Administration Utility - 180 CVEs
- Snapmanager - 180 CVEs
- Oncommand Unified Manager - 169 CVEs
- H700e Firmware - 149 CVEs
- H300e Firmware - 148 CVEs
- H500e Firmware - 148 CVEs
- Clustered Data Ontap - 145 CVEs
- E-series Santricity Storage Manager - 140 CVEs
- Storage Automation Store - 113 CVEs
- Solidfire & Hci Management Node - 103 CVEs
- Element Software - 100 CVEs
- E-series Santricity Web Services - 99 CVEs
- Oncommand Balance - 83 CVEs
- Santricity Unified Manager - 77 CVEs
- 7-mode Transition Tool - 75 CVEs
- Oncommand Performance Manager - 73 CVEs
- Storagegrid - 73 CVEs
- Solidfire Baseboard Management Controller Firmware - 71 CVEs
- Virtual Storage Console - 70 CVEs
- Plug-in For Symantec Netbackup - 69 CVEs
- Vasa Provider For Clustered Data Ontap - 69 CVEs
- Oncommand Shift - 64 CVEs
- Storage Replication Adapter For Clustered Data Ontap - 63 CVEs
- H610s Firmware - 62 CVEs
- Data Availability Services - 61 CVEs
- E-series Performance Analyzer - 61 CVEs
- Bootstrap Os - 57 CVEs
- Cloud Secure Agent - 57 CVEs
- Cloud Insights Acquisition Unit - 53 CVEs
- Solidfire, Enterprise Sds & Hci Storage Node - 43 CVEs
- Snap Creator Framework - 42 CVEs
- Hci Baseboard Management Controller - 39 CVEs
- H610c Firmware - 38 CVEs
- Hci Compute Node - 38 CVEs
- E-series Santricity Web Services Proxy - 35 CVEs
- H615c Firmware - 35 CVEs
- Hci Compute Node Firmware - 34 CVEs
- Data Ontap - 33 CVEs
- A700s Firmware - 32 CVEs
- E-series Santricity Unified Manager - 30 CVEs
- Ontap Tools - 30 CVEs
- Service Level Manager - 29 CVEs
- E-series Santricity Management Plug-ins - 28 CVEs
- Management Services For Element Software - 28 CVEs
- Oncommand System Manager - 27 CVEs
- Santricity Cloud Connector - 27 CVEs
- Solidfire & Hci Storage Node - 27 CVEs
- Hci Storage Node - 26 CVEs
- Solidfire Baseboard Management Controller - 26 CVEs
- H300s - 25 CVEs
- H410s - 25 CVEs
- H500s - 25 CVEs
- H700s - 25 CVEs
- Hci Bootstrap Os - 25 CVEs
- Ontap - 25 CVEs
- Cloud Insights Storage Workload Security Agent - 23 CVEs
- Clustered Data Ontap Antivirus Connector - 23 CVEs
- Data Ontap Edge - 23 CVEs
- Santricity Storage Plugin - 23 CVEs
- Snapcenter Server - 23 CVEs
- Cn1610 Firmware - 22 CVEs
- Fas/aff Bios - 22 CVEs
- A250 Firmware - 21 CVEs
- Aff A400 Firmware - 21 CVEs
- Hci Compute Node Bios - 21 CVEs
- Smi-s Provider - 21 CVEs
- Cloud Manager - 19 CVEs
- Oncommand Api Services - 19 CVEs
- Aff A700s Firmware - 18 CVEs
- Snapdrive - 18 CVEs
- Snapprotect - 18 CVEs
- A400 Firmware - 17 CVEs
- Management Services For Netapp Hci - 17 CVEs
- 8300 Firmware - 16 CVEs
- 8700 Firmware - 16 CVEs
- Hci - 16 CVEs
- Management Services For Element Software And Netapp Hci - 16 CVEs
- Solidfire Bios - 16 CVEs
- Active Iq Performance Analytics Services - 15 CVEs
- Fas/aff Baseboard Management Controller - 15 CVEs
- Manageability Software Development Kit - 15 CVEs
- Aff 500f Firmware - 14 CVEs
- Data Infrastructure Insights Storage Workload Security Agent - 14 CVEs
- Hci Storage Node Bios - 14 CVEs
- 500f Firmware - 13 CVEs
- Bluexp - 13 CVEs
- Santricity Smi-s Provider - 13 CVEs
- Service Processor - 13 CVEs
- Aff 8300 Firmware - 12 CVEs
- Aff 8700 Firmware - 12 CVEs
- Aff A250 Firmware - 11 CVEs
- Brocade San Navigator - 11 CVEs
- E-series Santricity Management - 11 CVEs
- Fas 500f Firmware - 11 CVEs
- Fas 8300 Firmware - 11 CVEs
- Fas 8700 Firmware - 11 CVEs
- Fas Bios - 11 CVEs
- H410c - 11 CVEs
- Oncommand Unified Manager Core Package - 11 CVEs
- Trident - 11 CVEs
- Vasa Provider - 11 CVEs
- Aff Baseboard Management Controller - 10 CVEs
- Aff Bios - 10 CVEs
- Cloud Insights Telegraf Agent - 10 CVEs
- Cloud Volumes Ontap Mediator - 10 CVEs
- Fas2720 Firmware - 10 CVEs
- Fas2750 Firmware - 10 CVEs
- A220 Firmware - 9 CVEs
- A800 Firmware - 9 CVEs
- C190 Firmware - 9 CVEs
- Data Infrastructure Insights Acquisition Unit - 9 CVEs
- Element Plug-in For Vcenter Server - 9 CVEs
- Element Software Management Node - 9 CVEs
- Fas8300 Firmware - 9 CVEs
- Fas8700 Firmware - 9 CVEs
- Ontap 9 - 9 CVEs
- Fabric-attached Storage A400 Firmware - 8 CVEs
- Ontap Select Deploy - 8 CVEs
- Hci H410c Firmware - 7 CVEs
- Max Data - 7 CVEs
- Santricity Web Services Proxy - 7 CVEs
- A320 Firmware - 6 CVEs
- Active Iq Unified Manager For Vmware Vsphere - 6 CVEs
- C400 Firmware - 6 CVEs
- E-series Bios - 6 CVEs
- Ontap Antivirus Connector - 6 CVEs
- Steelstore - 6 CVEs
- Storage Replication Adapter - 6 CVEs
- Storagegrid Formerly Storagegrid Webscale - 6 CVEs
- Storagegrid Webscale - 6 CVEs
- C250 Firmware - 5 CVEs
- Cloud Insights - 5 CVEs
- Cloud Insights Telegraf - 5 CVEs
- Element Software Management - 5 CVEs
- Fas2820 Firmware - 5 CVEs
- Hci Storage Node Firmware - 5 CVEs
- Hci Storage Nodes - 5 CVEs
- Hyper Converged Infrastructure - 5 CVEs
- Snapcenter Plug-in - 5 CVEs
- A150 Firmware - 4 CVEs
- A900 Firmware - 4 CVEs
- Active Iq - 4 CVEs
- Beegfs Csi Driver - 4 CVEs
- C800 Firmware - 4 CVEs
- Converged Systems Advisor Agent - 4 CVEs
- Element - 4 CVEs
- Element Os - 4 CVEs
- Kubernetes Monitoring Operator - 4 CVEs
- Nextgen Api - 4 CVEs
- Oncommand Unified Manager For Clustered Data Ontap - 4 CVEs
- Virtual Storage Console For Vmware Vsphere - 4 CVEs
- A1k Firmware - 3 CVEs
- A70 Firmware - 3 CVEs
- A90 Firmware - 3 CVEs
- Aff A220 Firmware - 3 CVEs
- Aff C190 Firmware - 3 CVEs
- Altavault - 3 CVEs
- Astra Control Center - 3 CVEs
- Astra Trident - 3 CVEs
- Brocade Fabric Operating System - 3 CVEs
- Brocade Fabric Operating System Firmware - 3 CVEs
- Brocade Network Advisor - 3 CVEs
- Data Ontap Operating In 7-mode - 3 CVEs
- E-series Santricity Os Controller Software - 3 CVEs
- Fabric-attached Storage 8300 Firmware - 3 CVEs
- Fabric-attached Storage 8700 Firmware - 3 CVEs
- Fas9500 Firmware - 3 CVEs
- Fas A400 Firmware - 3 CVEs
- Hci H610s Firmware - 3 CVEs
- Metrocluster Tiebreaker - 3 CVEs
- Solidfire Element Os - 3 CVEs
- Solidfire Element Os Management Node - 3 CVEs
- Solidfire Enterprise Sds - 3 CVEs
- Storage Replication Adapter For Clustered Data Ontap For Vmware Vsphere - 3 CVEs
- Storage Services Connector - 3 CVEs
- 9500 Firmware - 2 CVEs
- Aff A200 Firmware - 2 CVEs
- Aff A300 Firmware - 2 CVEs
- Aff A320 Firmware - 2 CVEs
- Aff A700 Firmware - 2 CVEs
- Aff Baseboard Management Controller Firmware - 2 CVEs
- All Flash Fabric-attached Storage 8300 Firmware - 2 CVEs
- All Flash Fabric-attached Storage 8700 Firmware - 2 CVEs
- All Flash Fabric-attached Storage A400 Firmware - 2 CVEs
- Altavault Ost Plug-in - 2 CVEs
- Baseboard Management Controller Firmware - 2 CVEs
- Fas500f Firmware - 2 CVEs
- Fas8200 Firmware - 2 CVEs
- Fas Baseboard Management Controller - 2 CVEs
- H615c - 2 CVEs
- Hci H610c Firmware - 2 CVEs
- Hci H615c Firmware - 2 CVEs
- Host Agent - 2 CVEs
- Inventory Collect Tool - 2 CVEs
- Oncommand Cloud Manager - 2 CVEs
- Oncommand Unified Manager For 7-mode Core Package - 2 CVEs
- Oncommand Unified Manager For Linux - 2 CVEs
- Ontap Mediator - 2 CVEs
- Ontap System Manager - 2 CVEs
- Sra Plugin - 2 CVEs
- Storage Encryption - 2 CVEs
- Storagegrid Webscale Nas Bridge - 2 CVEs
- Symantec Netbackup - 2 CVEs
- System Manager - 2 CVEs
- Windows Host Utilities - 2 CVEs
- 8200 Firmware - 1 CVEs
- 9000 Firmware - 1 CVEs
- A300 Firmware - 1 CVEs
- A700 Firmware - 1 CVEs
- A9500 Firmware - 1 CVEs
- Active Iq Config Advisor - 1 CVEs
- Active Iq Onecollect - 1 CVEs
- Aff A700s - 1 CVEs
- Aff A700s Baseboard Management Controller - 1 CVEs
- Aff A800 Firmware - 1 CVEs
- Aff A900 Firmware - 1 CVEs
- Affa900 Firmware - 1 CVEs
- All Flash Fabric-attached Storage 2820 - 1 CVEs
- All Flash Fabric-attached Storage 500f - 1 CVEs
- All Flash Fabric-attached Storage 8300 - 1 CVEs
- All Flash Fabric-attached Storage 8700 - 1 CVEs
- All Flash Fabric-attached Storage 9500 - 1 CVEs
- All Flash Fabric-attached Storage A250 - 1 CVEs
- All Flash Fabric-attached Storage A400 - 1 CVEs
- All Flash Fabric-attached Storage A800 - 1 CVEs
- All Flash Fabric-attached Storage A900 - 1 CVEs
- All Flash Fabric-attached Storage C250 - 1 CVEs
- All Flash Fabric-attached Storage C400 - 1 CVEs
- All Flash Fabric-attached Storage C800 - 1 CVEs
- Astra Trident Autosupport - 1 CVEs
- Atto Fibrebridge 7500n - 1 CVEs
- Baseboard Management Controller - 1 CVEs
- Baseboard Management Controller 500f Firmware - 1 CVEs
- Baseboard Management Controller A250 Firmware - 1 CVEs
- Bh500s Firmware - 1 CVEs
- Blue Xp Connector - 1 CVEs
- E-series Santricity Storage - 1 CVEs
- Ef600a Firmware - 1 CVEs
- Element Healthtools - 1 CVEs
- Element Plug-in - 1 CVEs
- Fas2600 Firmware - 1 CVEs
- Fas26x0 Firmware - 1 CVEs
- Fas2700 Firmware - 1 CVEs
- Fas27x0 Firmware - 1 CVEs
- Fas9000 Firmware - 1 CVEs
- Fas 8300 - 1 CVEs
- Fas 8700 - 1 CVEs
- Fas A250 Firmware - 1 CVEs
- Fas A400 - 1 CVEs
- Fas Baseboard Management Controller A220 - 1 CVEs
- Fas Baseboard Management Controller A220 Firmware - 1 CVEs
- Fas Baseboard Management Controller A320 - 1 CVEs
- Fas Baseboard Management Controller A320 Firmware - 1 CVEs
- Fas Baseboard Management Controller A400 Firmware - 1 CVEs
- Fas Baseboard Management Controller A800 - 1 CVEs
- Fas Baseboard Management Controller A800 Firmware - 1 CVEs
- Fas Baseboard Management Controller C190 - 1 CVEs
- Fas Baseboard Management Controller C190 Firmware - 1 CVEs
- Fas Baseboard Management Controller Firmware - 1 CVEs
- H300e - 1 CVEs
- H500e - 1 CVEs
- H610c - 1 CVEs
- H610s - 1 CVEs
- H700e - 1 CVEs
- Hci H300s Firmware - 1 CVEs
- Hci H410s Firmware - 1 CVEs
- Hci H500s Firmware - 1 CVEs
- Hci H700s Firmware - 1 CVEs
- Hcl Compute Node Bios - 1 CVEs
- Hyper Converged Infrastructure Compute Node - 1 CVEs
- Instaclustr Fork Of Stratios Cassandra-lucene-index Plugin - 1 CVEs
- Less - 1 CVEs
- Netapp Fas 83008700 And Aff A400 Baseboard Management Controller - 1 CVEs
- Netapp Hci Baseboard Management Controller Bmc Hci H610c - 1 CVEs
- Netapp Hci Baseboard Management Controller Bmc Hci H610s - 1 CVEs
- Netapp Hci Baseboard Management Controller Bmc Hci H615c - 1 CVEs
- Netapp Manageability Sdk - 1 CVEs
- Netapp Plug-in - 1 CVEs
- Netapp Xcp Smb - 1 CVEs
- Next Generation Application Programming Interface - 1 CVEs
- Nfs Plug-in - 1 CVEs
- Oncommand Api Services And Netapp Service Level Manager - 1 CVEs
- Oncommand Report - 1 CVEs
- Oncommand Unified Manager 7-mode - 1 CVEs
- Oncommand Unified Manager For 7-mode - 1 CVEs
- Oncommand Unified Manager For Vmware Vspherelinux And Windows 7.2 And Above - 1 CVEs
- Oncommand Unified Manager For Windows - 1 CVEs
- Ontap Select Deploy Utility - 1 CVEs
- San Host Utilities - 1 CVEs
- San Host Utilities For Windows - 1 CVEs
- Santricity Products - 1 CVEs
- Santricity Smi-s Provider Firmware - 1 CVEs
- Santricity Storage Manager - 1 CVEs
- Sg1100 Firmware - 1 CVEs
- Sg110 Firmware - 1 CVEs
- Sg6160 Firmware - 1 CVEs
- Sgf6112 Firmware - 1 CVEs
- Snapcenter Plugin For Vmware Vsphere - 1 CVEs
- Snapdriver - 1 CVEs
- Snapgathers - 1 CVEs
- Storagegrid Firmware - 1 CVEs
- System Setup - 1 CVEs
- Virtual Desktop Service - 1 CVEs
- Xcp Nfs - 1 CVEs
- 500f - 0 CVEs
- 8200 - 0 CVEs
- 8300 - 0 CVEs
- 8700 - 0 CVEs
- 9000 - 0 CVEs
- 9500 - 0 CVEs
- A150 - 0 CVEs
- A1k - 0 CVEs
- A220 - 0 CVEs
- A250 - 0 CVEs
- A300 - 0 CVEs
- A320 - 0 CVEs
- A400 - 0 CVEs
- A70 - 0 CVEs
- A700 - 0 CVEs
- A700s - 0 CVEs
- A800 - 0 CVEs
- A90 - 0 CVEs
- A900 - 0 CVEs
- A9500 - 0 CVEs
- Aff 500f - 0 CVEs
- Aff 8300 - 0 CVEs
- Aff 8700 - 0 CVEs
- Aff A200 - 0 CVEs
- Aff A220 - 0 CVEs
- Aff A250 - 0 CVEs
- Aff A300 - 0 CVEs
- Aff A320 - 0 CVEs
- Aff A400 - 0 CVEs
- Aff A700 - 0 CVEs
- Aff A800 - 0 CVEs
- Aff A900 - 0 CVEs
- Aff C190 - 0 CVEs
- Affa900 - 0 CVEs
- Baseboard Management Controller 500f - 0 CVEs
- Baseboard Management Controller A250 - 0 CVEs
- Baseboard Management Controller H300e - 0 CVEs
- Baseboard Management Controller H300e Firmware - 0 CVEs
- Baseboard Management Controller H300s - 0 CVEs
- Baseboard Management Controller H300s Firmware - 0 CVEs
- Baseboard Management Controller H410c - 0 CVEs
- Baseboard Management Controller H410c Firmware - 0 CVEs
- Baseboard Management Controller H410s - 0 CVEs
- Baseboard Management Controller H410s Firmware - 0 CVEs
- Baseboard Management Controller H500e - 0 CVEs
- Baseboard Management Controller H500e Firmware - 0 CVEs
- Baseboard Management Controller H500s - 0 CVEs
- Baseboard Management Controller H500s Firmware - 0 CVEs
- Baseboard Management Controller H610c - 0 CVEs
- Baseboard Management Controller H610c Firmware - 0 CVEs
- Baseboard Management Controller H610s - 0 CVEs
- Baseboard Management Controller H610s Firmware - 0 CVEs
- Baseboard Management Controller H615c - 0 CVEs
- Baseboard Management Controller H615c Firmware - 0 CVEs
- Baseboard Management Controller H700e - 0 CVEs
- Baseboard Management Controller H700e Firmware - 0 CVEs
- Baseboard Management Controller H700s - 0 CVEs
- Baseboard Management Controller H700s Firmware - 0 CVEs
- Brocade Fabric Os - 0 CVEs
- C190 - 0 CVEs
- C250 - 0 CVEs
- C400 - 0 CVEs
- C800 - 0 CVEs
- Cluster Data Ontap - 0 CVEs
- Cn1610 - 0 CVEs
- Data Ontap Dsm For Windows Mpio - 0 CVEs
- Ef600a - 0 CVEs
- Fabric-attached Storage 8300 - 0 CVEs
- Fabric-attached Storage 8700 - 0 CVEs
- Fabric-attached Storage A400 - 0 CVEs
- Fas2600 - 0 CVEs
- Fas26x0 - 0 CVEs
- Fas2700 - 0 CVEs
- Fas2720 - 0 CVEs
- Fas2750 - 0 CVEs
- Fas27x0 - 0 CVEs
- Fas2820 - 0 CVEs
- Fas500f - 0 CVEs
- Fas8200 - 0 CVEs
- Fas8300 - 0 CVEs
- Fas8700 - 0 CVEs
- Fas900 - 0 CVEs
- Fas9000 - 0 CVEs
- Fas9500 - 0 CVEs
- Fas 500f - 0 CVEs
- Fas A250 - 0 CVEs
- Fas Baseboard Management Controller A400 - 0 CVEs
- Hci H300s - 0 CVEs
- Hci H410c - 0 CVEs
- Hci H410s - 0 CVEs
- Hci H500s - 0 CVEs
- Hci H610c - 0 CVEs
- Hci H610s - 0 CVEs
- Hci H615c - 0 CVEs
- Hci H700s - 0 CVEs
- Hcl Compute Node - 0 CVEs
- Netcache - 0 CVEs
- Oncommand Unified Manger - 0 CVEs
- Os Controller - 0 CVEs
- Sg110 - 0 CVEs
- Sg1100 - 0 CVEs
- Sg6160 - 0 CVEs
- Sgf6112 - 0 CVEs
- Virtual File Mangemer - 0 CVEs
Newest CVEs of Netapp
- CVE-2026-22063 - CVSS 6 (medium), 2026-10-27: The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October…
- CVE-2026-22061 - CVSS 8.2 (high), 2026-10-09: Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view…
- CVE-2026-22056 - CVSS 2.3 (low), 2026-08-28: StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard configuration and scenario are susceptible to a Denial of Service…
- CVE-2026-22049 - CVSS 8.8 (high), 2026-07-22: ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID…
- CVE-2026-22055 - CVSS 8.8 (high), 2026-06-03: Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized…
- CVE-2026-22054 - CVSS 8.8 (high), 2026-06-03: Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized…
- CVE-2026-22051 - CVSS 4.3 (medium), 2026-04-20: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful…
- CVE-2026-22052 - CVSS 5.3 (medium), 2026-03-05: ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an…
- CVE-2026-22048 - CVSS 7.1 (high), 2026-02-18: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID…
- CVE-2026-22050 - CVSS 6.9 (medium), 2026-01-12: ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a…
- CVE-2025-26514 - CVSS 6.4 (medium), 2025-09-19: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Reflected Cross-Site Scripting vulnerability.…
- CVE-2025-26517 - CVSS 5.4 (medium), 2025-09-19: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege escalation vulnerability. Successful…
- CVE-2025-26516 - CVSS 5.3 (medium), 2025-09-19: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Denial of Service vulnerability. Successful exploit…
- CVE-2025-26515 - CVSS 7.5 (high), 2025-09-19: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 without Single Sign-on enabled are susceptible to a Server-Side Request…
- CVE-2025-26513 - CVSS 7.8 (high), 2025-08-07: The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local…
- CVE-2025-27820 - CVSS 7.5 (high), 2025-04-24: A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the…
- CVE-2025-30722 - CVSS 6.8 (medium), 2025-04-15: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4…
- CVE-2025-30691 - CVSS 4.8 (medium), 2025-04-15: Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and…
- CVE-2025-21583 - CVSS 4.9 (medium), 2025-04-15: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.4.0 and 9.0.0. Easily…
- CVE-2025-31672 - CVSS 5.3 (medium), 2025-04-09: Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are…
- CVE-2025-1861 - CVSS 9.8 (critical), 2025-03-30: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an…
- CVE-2025-1736 - CVSS 7.3 (high), 2025-03-30: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the…
- CVE-2025-1734 - CVSS 6.3 (medium), 2025-03-30: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when receiving headers from HTTP server, the…
- CVE-2025-26512 - CVSS 9.9 (critical), 2025-03-24: SnapCenter versions prior to 6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin…
- CVE-2025-29768 - CVSS 4.4 (medium), 2025-03-13: Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium…
- CVE-2025-25292 - CVSS 9.8 (critical), 2025-03-12: ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml…
- CVE-2025-25291 - CVSS 9.8 (critical), 2025-03-12: ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml…
- CVE-2024-54085 - CVSS 10 (critical), 2025-03-11: AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful…
- CVE-2025-24813 - CVSS 10 (critical), 2025-03-10: Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files…
- CVE-2025-27423 - CVSS 7.1 (high), 2025-03-03: Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or…
