CD
Product
Clustered Data ONTAP
On CISA KEVExploited in the wildRansomware-linked
187
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 28High 83Medium 67Low 9
Watch
Add Clustered Data ONTAP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-28322 | 3.7 | May 26 | An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for… Affected: All versions, or not specified |
| CVE-2022-35252 | 3.7 | Sep 23 | When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server… Affected: All versions, or not specified |
| CVE-2021-22924 | 3.7 | Aug 5 | libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching… Affected: All versions, or not specified |
| CVE-2020-8284 | 3.7 | Dec 14 | A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract… Affected: All versions, or not specified |
| CVE-2015-8020 | 3.7 | Jan 11 | Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure Affected: 8.0; 8.3.1; 8.3.2 |
| CVE-2020-8589 | 3.5 | Feb 3 | Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the names of other Storage… Affected: before 9.3; 9.4 before 9.5; 9.3; 9.3; 9.3; 9.3; +10 more |
| CVE-2020-8588 | 3.5 | Feb 3 | Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the existence of data on other… Affected: before 9.3; 9.4 before 9.5; 9.3; 9.3; 9.3; 9.3; +10 more |
| CVE-2020-8590 | 3.3 | Feb 8 | Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when… Affected: before 9.1; 9.2 before 9.3; 9.1; 9.1; 9.1; 9.1; +27 more |
| CVE-2020-8578 | 3.3 | Feb 8 | Clustered Data ONTAP versions prior to 9.3P20 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the… Affected: before 9.3; 9.3; 9.3; 9.3; 9.3; 9.3; +7 more |
Showing 9