SS
Product
SnapCenter Server
On CISA KEVExploited in the wild
23
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 16Low 1
Watch
Add SnapCenter Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11023 In wildKEV | 6.1 | Apr 29 | Potential XSS vulnerability in jQuery Affected: All versions, or not specified |
| CVE-2018-8014 | 9.8 | May 16 | The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable… Affected: All versions, or not specified |
| CVE-2017-15516 | 8.8 | Nov 16 | NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an unintended authenticated… Affected: 1.1; 2.0 |
| CVE-2015-7887 | 8.1 | Aug 7 | NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups Affected: 1.0 |
| CVE-2016-8610 | 7.5 | Nov 13 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection… Affected: All versions, or not specified |
| CVE-2016-1502 | 7.3 | Feb 7 | NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors Affected: 1.0; 1.0 |
| CVE-2017-15519 | 7.2 | Mar 6 | Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services Affected: 2.0 through 3.0.1 |
| CVE-2020-14800 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2020-14775 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2020-14769 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2018-5482 | 5.3 | Mar 4 | NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an… Affected: Versions prior to 4.1 |
| CVE-2020-14799 | 4.9 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2020-14794 | 4.9 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14793 | 4.9 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14790 | 4.9 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS) Affected: All versions, or not specified |
| CVE-2020-14789 | 4.9 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS) Affected: All versions, or not specified |
| CVE-2020-14786 | 4.9 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS) Affected: All versions, or not specified |
| CVE-2020-14785 | 4.9 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14777 | 4.9 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14773 | 4.9 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14672 | 4.9 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure) Affected: All versions, or not specified |
| CVE-2017-15515 | 4.8 | Mar 4 | NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary… Affected: Versions prior to 4.0 |
| CVE-2020-14791 | 2.2 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
Showing 23