Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 13

Export CSV
CVE-2024-2511

Unbounded memory growth with session handling in TLSv1.3

Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is being used (but not if early_data support is also configured and the default anti-replay protection is in use). In this case, under certain conditions, the session cache can get into an incorrect state and it will fail to flush properly as it fills. The session cache will continue to grow in an unbounded manner. A malicious client could deliberately create the scenario for this failure to force a Denial of Service. It may also happen by accident in normal operation. This issue only affects TLS servers supporting TLSv1.3. It does not affect TLS clients. The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL 1.0.2 is also not affected by this issue.

CVSS 3.1 · 5.9 Medium EPSS 59.3% KEV · Not listed
Vendors
Debian Netapp Openssl and 2 more
Products
Debian Linux 500f 500f Firmware and 99 more
CVE-2026-22063

CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products

The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.

CVSS 4.0 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Netapp
Products
E-series Santricity Os Controller Ontap 9 Storagegrid Webscale
CVE-2023-27535

curl: FTP too eager connection reuse

An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.

CVSS 3.1 · 5.9 Medium EPSS 1.8% KEV · Not listed
Vendors
Debian Fedoraproject Haxx and 3 more
Products
Debian Linux Fedora Libcurl and 13 more
CVE-2022-42915

curl: HTTP proxy double-free

curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection to the remote server by issuing a CONNECT request to the proxy, and then tunnels the rest of the protocol through. An HTTP proxy might refuse this request (HTTP proxies often only allow outgoing connections to specific port numbers, like 443 for HTTPS) and instead return a non-200 status code to the client. Due to flaws in the error/cleanup handling, this could trigger a double free in curl if one of the following schemes were used in the URL for the transfer: dict, gopher, gophers, ldap, ldaps, rtmp, rtmps, or telnet. The earliest affected version is 7.77.0.

CVSS 3.1 · 8.1 High EPSS 3.7% KEV · Not listed
Vendors
Apple Fedoraproject Haxx and 3 more
Products
Macos Fedora Curl and 11 more
CVE-2022-27780

curl: percent-encoded path separator in URL host

The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For example, a URL like `http://example.com%2F127.0.0.1/`, would be allowed bythe parser and get transposed into `http://example.com/127.0.0.1/`. This flawcan be used to circumvent filters, checks and more.

CVSS 3.1 · 5.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Haxx Netapp Splunk
Products
Curl Clustered Data Ontap H300s and 15 more
CVE-2026-22049

WebAuthn MFA Bypass due to Improper Relying Party ID Handling

ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Netapp
Products
Ontap Ontap 9
CVE-2024-6119

Possible denial of service in X.509 name checks

Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of service. Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address when comparing the expected name with an `otherName` subject alternative name of an X.509 certificate. This may result in an exception that terminates the application program. Note that basic certificate chain validation (signatures, dates, ...) is not affected, the denial of service can occur only when the application also specifies an expected DNS name, Email address or IP address. TLS servers rarely solicit client certificates, and even when they do, they generally don't perform a name check against a reference identifier (expected identity), but rather extract the presented identity after checking the certificate chain. So TLS servers are generally not affected and the severity of the issue is Moderate. The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.

CVSS 3.1 · 7.5 High EPSS 66.6% KEV · Not listed
Vendors
Netapp Openssl Redhat
Products
500f 500f Firmware A250 and 31 more
CVE-2026-22050

Privilege Escalation via Snapshot Expiry Misconfiguration in NetApp ONTAP 9

ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a privileged remote attacker to set the snapshot expiry time to none.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Netapp
Products
Ontap Ontap 9
CVE-2026-22052

Authenticated Directory Listing Disclosure in ONTAP S3 NAS Buckets

ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netapp
Products
Ontap Ontap 9
CVE-2024-38475

Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. Substitutions in server context that use a backreferences or variables as the first segment of the substitution are affected.  Some unsafe RewiteRules will be broken by this change and the rewrite flag "UnsafePrefixStat" can be used to opt back in once ensuring the substitution is appropriately constrained.

CVSS 3.1 · 9.1 Critical EPSS 100.0% KEV · Listed
Vendors
Apache Netapp Redhat and 1 more
Products
Http Server Ontap 9 Enterprise Linux and 16 more
CVE-2024-53580

iperf: Denial of Service in iperf Due to Improper JSON Handling

iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Es Netapp Redhat
Products
Iperf3 Hci Compute Node Ontap 9 and 6 more