NetApp SnapCenter 4.1.1

CPE Details

NetApp SnapCenter 4.1.1
netapp
snapcenter
4.1.1
2021-06-09
12h13 +00:00
2021-06-09
12h15 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:netapp:snapcenter:4.1.1:-:*:*:*:*:*:*

Informations

Vendor

netapp

Product

snapcenter

Version

4.1.1

Update

-

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-21993 2024-07-09 21h26 +00:00 SnapCenter versions prior to 5.0p1 are susceptible to a vulnerability which could allow an authenticated attacker to discover plaintext credentials.
6.5
Medium
CVE-2023-27313 2023-10-12 18h22 +00:00 SnapCenter versions 3.x and 4.x prior to 4.9 are susceptible to a vulnerability which may allow an authenticated unprivileged user to gain access as an admin user.
8.8
High
CVE-2022-38732 2022-09-29 12h36 +00:00 SnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which could allow certain types of attacks that otherwise would be prevented.
7.5
High
CVE-2022-23234 2022-03-16 13h12 +00:00 SnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext HANA credentials.
5.5
Medium
CVE-2021-28165 2021-04-01 12h20 +00:00 In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
7.5
High
CVE-2017-7657 2018-06-26 14h00 +00:00 In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request.
9.8
Critical