SnapCenter Server vulnerabilities | LiveThreat CVE Feed

Product

SnapCenter Server

by NetApp · last CVE Oct 21, 2020

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities23 In the news0 Timeline

Severity mix

Critical 1High 5Medium 16Low 1

Severity

All severities23 Critical1 High5 Medium16 Low1

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add SnapCenter Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-11023 In wildKEV	6.1	85%	Apr 29	Potential XSS vulnerability in jQuery Affected: All versions, or not specified
CVE-2020-14800	6.5	1%	Oct 21	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified
CVE-2020-14775	6.5	2%	Oct 21	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified
CVE-2020-14769	6.5	2%	Oct 21	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified
CVE-2018-5482	5.3	1%	Mar 4	NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an… Affected: Versions prior to 4.1
CVE-2020-14799	4.9	1%	Oct 21	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified
CVE-2020-14794	4.9	2%	Oct 21	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified
CVE-2020-14793	4.9	2%	Oct 21	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified
CVE-2020-14790	4.9	2%	Oct 21	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS) Affected: All versions, or not specified
CVE-2020-14789	4.9	3%	Oct 21	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS) Affected: All versions, or not specified
CVE-2020-14786	4.9	2%	Oct 21	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS) Affected: All versions, or not specified
CVE-2020-14785	4.9	2%	Oct 21	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified
CVE-2020-14777	4.9	2%	Oct 21	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified
CVE-2020-14773	4.9	2%	Oct 21	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified
CVE-2020-14672	4.9	2%	Oct 21	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure) Affected: All versions, or not specified
CVE-2017-15515	4.8	1%	Mar 4	NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary… Affected: Versions prior to 4.0