SS
Product
SnapCenter Server
On CISA KEVExploited in the wild
23
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 16Low 1
Watch
Add SnapCenter Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-15516 | 8.8 | Nov 16 | NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an unintended authenticated… Affected: 1.1; 2.0 |
| CVE-2015-7887 | 8.1 | Aug 7 | NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups Affected: 1.0 |
| CVE-2016-8610 | 7.5 | Nov 13 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection… Affected: All versions, or not specified |
| CVE-2016-1502 | 7.3 | Feb 7 | NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors Affected: 1.0; 1.0 |
| CVE-2017-15519 | 7.2 | Mar 6 | Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services Affected: 2.0 through 3.0.1 |
Showing 5