Netapp

Ontap

25 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.5

CVE-2024-2004

Exploit
  • EPSS 1.68%
  • Veröffentlicht 27.03.2024 08:15:41
  • Zuletzt bearbeitet 30.07.2025 19:42:14

When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to c...

7.5

CVE-2024-28757

Exploit
  • EPSS 2.01%
  • Veröffentlicht 10.03.2024 05:15:06
  • Zuletzt bearbeitet 04.11.2025 22:15:59

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).

7.5

CVE-2023-4408

  • EPSS 1.34%
  • Veröffentlicht 13.02.2024 14:15:45
  • Zuletzt bearbeitet 14.03.2025 17:15:40

The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` insta...

4.6

CVE-2023-27317

  • EPSS 0.4%
  • Veröffentlicht 15.12.2023 23:15:07
  • Zuletzt bearbeitet 21.11.2024 07:52:38

ONTAP 9 versions 9.12.1P8, 9.13.1P4, and 9.13.1P5 are susceptible to a vulnerability which will cause all SAS-attached FIPS 140-2 drives to become unlocked after a system reboot or power cycle or a single SAS-attached FIPS 140-2 drive to become un...

5.9

CVE-2023-27536

Exploit
  • EPSS 1.57%
  • Veröffentlicht 30.03.2023 20:15:07
  • Zuletzt bearbeitet 14.02.2025 16:15:33

An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION opt...