Content Library · Advisory
Browse 560 2023 NetApp advisory records in the NetApp Black Box content library. Page 1 of 5.
Showing all 120 items on this page
Source: https://security.netapp.com/advisory/NTAP-20231227-0001/
NetApp published this final advisory covering CVE-2023-5954; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231227-0005/
NetApp published this interim advisory covering CVE-2023-48237; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231227-0002/
NetApp published this interim advisory covering CVE-2023-48236; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231227-0007/
NetApp published this interim advisory covering CVE-2023-48235; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231227-0004/
NetApp published this interim advisory covering CVE-2023-48234; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231227-0003/
NetApp published this interim advisory covering CVE-2023-48233; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231227-0006/
NetApp published this interim advisory covering CVE-2023-48232; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231227-0008/
NetApp published this interim advisory covering CVE-2023-48231; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231227-0011/
NetApp published this final advisory covering CVE-2019-3773; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Linux; Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231227-0009/
NetApp published this final advisory covering CVE-2019-10158; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231227-0010/
NetApp published this final advisory covering CVE-2018-8088; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Linux; Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231222-0001/
NetApp published this final advisory covering CVE-2023-46445, CVE-2023-46446; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Converged Systems Advisor Agent.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231221-0008/
NetApp published this interim advisory covering CVE-2023-25756, CVE-2023-22329; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Compute Node BIOS.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231221-0009/
NetApp published this final advisory covering CVE-2023-4809; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231221-0001/
NetApp published this final advisory covering CVE-2023-43665; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231221-0002/
NetApp published this final advisory covering CVE-2023-3955; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231221-0004/
NetApp published this final advisory covering CVE-2023-3893; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231221-0010/
NetApp published this final advisory covering CVE-2023-34055; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231221-0007/
NetApp published this final advisory covering CVE-2023-28376; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231221-0011/
NetApp published this final advisory covering CVE-2023-27319; the API labels exploitation information as **Not public**. The API currently lists affected products as: ONTAP Mediator.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231221-0006/
NetApp published this interim advisory covering CVE-2023-1194; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS); NetApp SolidFire & HCI Storage Node (Element Software).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231221-0005/
NetApp published this final advisory covering CVE-2022-3172; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231221-0003/
NetApp published this final advisory covering CVE-2021-25736; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231215-0001/
NetApp published this final advisory covering CVE-2023-27317; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP 9 (formerly Clustered Data ONTAP).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231214-0003/
NetApp published this final advisory covering CVE-2023-5978; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231214-0004/
NetApp published this final advisory covering CVE-2023-5941; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231214-0010/
NetApp published this final advisory covering CVE-2023-50164; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231214-0005/
NetApp published this final advisory covering CVE-2023-46848; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231214-0006/
NetApp published this final advisory covering CVE-2023-46728; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231214-0001/
NetApp published this final advisory covering CVE-2023-46695; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231214-0009/
NetApp published this final advisory covering CVE-2023-46589; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231214-0008/
NetApp published this final advisory covering CVE-2023-45283; the API labels exploitation information as **Public**. The API currently lists affected products as: Astra Control Center - Cloud Insights Telegraf Agent; Cloud Insights Telegraf Agent; NetApp Kubernetes Monitoring Operator.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231214-0002/
NetApp published this final advisory covering CVE-2023-41164; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231214-0007/
NetApp published this final advisory covering CVE-2023-34053; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0009/
NetApp published this final advisory covering CVE-2023-40284, CVE-2023-40285, CVE-2023-40286, CVE-2023-40287, CVE-2023-40288, CVE-2023-40289, CVE-2023-40290; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H410C.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0002/
NetApp published this final advisory covering CVE-2023-4692, CVE-2023-4693; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0004/
NetApp published this interim advisory covering CVE-2023-5178; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS); NetApp SolidFire & HCI Management Node; NetApp SolidFire & HCI Storage Node (Element Software); ONTAP Select Deploy administration utility.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0005/
NetApp published this final advisory covering CVE-2023-5088; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0001/
NetApp published this final advisory covering CVE-2023-46724; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0006/
NetApp published this interim advisory covering CVE-2023-46246; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0003/
NetApp published this final advisory covering CVE-2023-4399; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0007/
NetApp published this interim advisory covering CVE-2023-34969; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Compute Node (Bootstrap OS); NetApp HCI Compute Node BIOS; NetApp SolidFire & HCI Management Node; ONTAP Select Deploy administration utility.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0008/
NetApp published this interim advisory covering CVE-2023-3138; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Linux; Active IQ Unified Manager for VMware vSphere.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0016/
NetApp published this final advisory covering CVE-2023-27539; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0015/
NetApp published this final advisory covering CVE-2023-27530; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0014/
NetApp published this final advisory covering CVE-2022-44572; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0013/
NetApp published this final advisory covering CVE-2022-44571; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0010/
NetApp published this final advisory covering CVE-2022-44570; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0011/
NetApp published this final advisory covering CVE-2022-30123; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231208-0012/
NetApp published this final advisory covering CVE-2022-30122; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231130-0004/
NetApp published this final advisory covering CVE-2023-5574, CVE-2023-5367, CVE-2023-5380; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231130-0002/
NetApp published this final advisory covering CVE-2023-46847, CVE-2023-46846; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231130-0003/
NetApp published this final advisory covering CVE-2023-5824; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231130-0010/
NetApp published this interim advisory covering CVE-2023-5678; the API labels exploitation information as **Public**. The API currently lists affected products as: AFF Baseboard Management Controller (BMC) - A700s; Active IQ Unified Manager for Linux; Active IQ Unified Manager for VMware vSphere; FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400; FAS/AFF Baseboard Management Controller (BMC) - A250/500f/C250; Management Services for Element Software and NetApp HCI; NetApp Cloud Backup OST Plug-in (formerly AltaVault OST Plug-in); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Baseboard Management Controller (BMC) - H610C; NetApp HCI Baseboard Management Controller (BMC) - H610S; NetApp HCI Baseboard Management Controller (BMC) - H615C; NetApp HCI Compute Node (Bootstrap OS); NetApp Manageability SDK; NetApp SolidFire & HCI Management Node; NetApp SolidFire & HCI Storage Node (Element Software); ONTAP Select Deploy administration utility; OnCommand Workflow Automation.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231130-0009/
NetApp published this interim advisory covering CVE-2023-45853; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231130-0001/
NetApp published this final advisory covering CVE-2023-4163; the API labels exploitation information as **Public**. The API currently lists affected products as: Brocade Fabric Operating System Firmware.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231130-0007/
NetApp published this final advisory covering CVE-2023-3676; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231130-0005/
NetApp published this final advisory covering CVE-2023-31418; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231130-0006/
NetApp published this final advisory covering CVE-2023-31417; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231130-0008/
NetApp published this final advisory covering CVE-2022-4900; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231124-0002/
NetApp published this final advisory covering CVE-2023-3961, CVE-2023-4154, CVE-2023-4091, CVE-2023-42669, CVE-2023-42670; the API labels exploitation information as **Public**. The API currently lists affected products as: Management Services for Element Software and NetApp HCI.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231124-0007/
NetApp published this final advisory covering CVE-2023-5568; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231124-0005/
NetApp published this final advisory covering CVE-2023-5370; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231124-0009/
NetApp published this final advisory covering CVE-2023-5369; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231124-0004/
NetApp published this final advisory covering CVE-2023-5368; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231124-0008/
NetApp published this final advisory covering CVE-2023-46136; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231124-0010/
NetApp published this final advisory covering CVE-2023-4162; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231124-0003/
NetApp published this final advisory covering CVE-2023-3489; the API labels exploitation information as **Public**. The API currently lists affected products as: Brocade Fabric Operating System Firmware.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231124-0001/
NetApp published this final advisory covering CVE-2023-32252; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231124-0006/
NetApp published this interim advisory covering CVE-2022-38087; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Compute Node BIOS.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0009/
NetApp published this final advisory covering CVE-2023-39331, CVE-2023-39332; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0007/
NetApp published this final advisory covering CVE-2023-40372, CVE-2023-38740, CVE-2023-40374; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0005/
NetApp published this final advisory covering CVE-2023-38720, CVE-2023-30991; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0006/
NetApp published this final advisory covering CVE-2023-40373, CVE-2023-38728, CVE-2023-30987; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0004/
NetApp published this interim advisory covering CVE-2023-45862; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS); NetApp SolidFire & HCI Storage Node (Element Software).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0012/
NetApp published this interim advisory covering CVE-2023-4527; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0014/
NetApp published this interim advisory covering CVE-2023-45145; the API labels exploitation information as **Public**. The API currently lists affected products as: Management Services for Element Software and NetApp HCI.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0003/
NetApp published this interim advisory covering CVE-2023-44466; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS); NetApp SolidFire & HCI Management Node; ONTAP Select Deploy administration utility.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0008/
NetApp published this final advisory covering CVE-2023-38719; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0013/
NetApp published this final advisory covering CVE-2023-38552; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0011/
NetApp published this final advisory covering CVE-2023-36478; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0010/
NetApp published this final advisory covering CVE-2023-31419; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0001/
NetApp published this final advisory covering CVE-2023-2680; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0015/
NetApp published this interim advisory covering CVE-2023-23583; the API labels exploitation information as **Public**. The API currently lists affected products as: FAS/AFF BIOS - 2820; FAS/AFF BIOS - A900/9500; NetApp HCI Compute Node BIOS.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231116-0002/
NetApp published this final advisory covering CVE-2022-48554; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231110-0006/
NetApp published this final advisory covering CVE-2023-42445, CVE-2023-44387; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231110-0007/
NetApp published this final advisory covering CVE-2023-31102, CVE-2023-40481; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Microsoft Windows; OnCommand Workflow Automation.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231110-0003/
NetApp published this interim advisory covering CVE-2023-4813; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Baseboard Management Controller (BMC) - H610C; NetApp HCI Baseboard Management Controller (BMC) - H610S; NetApp HCI Baseboard Management Controller (BMC) - H615C; NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231110-0010/
NetApp published this final advisory covering CVE-2023-46604; the API labels exploitation information as **Public**. The API currently lists affected products as: E-Series SANtricity Unified Manager and Web Services Proxy; SANtricity Storage Plugin for vCenter.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231110-0001/
NetApp published this final advisory covering CVE-2023-45871; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS); NetApp SolidFire & HCI Management Node; NetApp SolidFire & HCI Storage Node (Element Software).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231110-0004/
NetApp published this interim advisory covering CVE-2023-41900; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231110-0009/
NetApp published this interim advisory covering CVE-2023-40791; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS); NetApp SolidFire & HCI Management Node; NetApp SolidFire & HCI Storage Node (Element Software).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231110-0005/
NetApp published this final advisory covering CVE-2023-40745; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231110-0008/
NetApp published this final advisory covering CVE-2023-39325; the API labels exploitation information as **Public**. The API currently lists affected products as: Trident; Trident Autosupport.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231110-0002/
NetApp published this final advisory covering CVE-2023-32636; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231103-0003/
NetApp published this final advisory covering CVE-2023-25588, CVE-2023-25585, CVE-2023-25586; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup OST Plug-in (formerly AltaVault OST Plug-in); ONTAP Select Deploy administration utility; SRA Plugin for Linux.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231103-0006/
NetApp published this interim advisory covering CVE-2023-43785, CVE-2023-43786, CVE-2023-43787; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Linux.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231103-0007/
NetApp published this interim advisory covering CVE-2023-45648, CVE-2023-42795; the API labels exploitation information as **Public**. The API currently lists affected products as: Brocade SAN Navigator (SANnav); NetApp HCI Compute Node (Bootstrap OS); ONTAP tools for VMware vSphere 9.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231103-0008/
NetApp published this final advisory covering CVE-2023-4822; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231103-0005/
NetApp published this final advisory covering CVE-2023-42467; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231103-0004/
NetApp published this final advisory covering CVE-2023-32005; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231103-0001/
NetApp published this interim advisory covering CVE-2023-29499; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231103-0002/
NetApp published this final advisory covering CVE-2023-25584; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup OST Plug-in (formerly AltaVault OST Plug-in); ONTAP Select Deploy administration utility; SRA Plugin for Linux.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231027-0009/
NetApp published this final advisory covering CVE-2023-22015, CVE-2023-22026, CVE-2023-22028, CVE-2023-22032, CVE-2023-22059, CVE-2023-22064, CVE-2023-22065, CVE-2023-22066, CVE-2023-22068, CVE-2023-22070, CVE-2023-22078, CVE-2023-22079, CVE-2023-22084, CVE-2023-22092, CVE-2023-22095, CVE-2023-22097, CVE-2023-22103, CVE-2023-22104, CVE-2023-22110, CVE-2023-22111, CVE-2023-22112, CVE-2023-22113, CVE-2023-22114, CVE-2023-22115, CVE-2023-2650, CVE-2023-38545; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere; OnCommand Insight; OnCommand Workflow Automation; SnapCenter.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231027-0006/
NetApp published this interim advisory covering CVE-2023-22025, CVE-2023-22067, CVE-2023-22081; the API labels exploitation information as **Public**. The API currently lists affected products as: Data Infrastructure Insights Acquisition Unit (formerly Cloud Insights Acquisition Unit); Data Infrastructure Insights Storage Workload Security Agent (formerly Cloud Insights Storage Workload Security Agent); NetApp BlueXP; NetApp HCI Compute Node (Bootstrap OS); OnCommand Workflow Automation.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231027-0011/
NetApp published this final advisory covering CVE-2023-31122, CVE-2023-43622, CVE-2023-45802; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231027-0010/
NetApp published this interim advisory covering CVE-2023-5363; the API labels exploitation information as **Public**. The API currently lists affected products as: Brocade Fabric Operating System Firmware; FAS/AFF Baseboard Management Controller (BMC) - A250/500f/C250; NetApp Cloud Backup OST Plug-in (formerly AltaVault OST Plug-in); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231027-0001/
NetApp published this final advisory covering CVE-2023-4004; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231027-0008/
NetApp published this final advisory covering CVE-2023-3817; the API labels exploitation information as **Public**. The API currently lists affected products as: OnCommand Insight.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231027-0005/
NetApp published this final advisory covering CVE-2023-32611; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231027-0004/
NetApp published this interim advisory covering CVE-2023-3223; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Linux; Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231027-0007/
NetApp published this final advisory covering CVE-2023-22102; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere; OnCommand Insight; OnCommand Workflow Automation.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231027-0003/
NetApp published this final advisory covering CVE-2014-3577; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231027-0002/
NetApp published this final advisory covering CVE-2023-4273, CVE-2023-4128, CVE-2023-4194; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231020-0008/
NetApp published this final advisory covering CVE-2023-3255, CVE-2023-3301; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231020-0009/
NetApp published this final advisory covering CVE-2023-39318, CVE-2023-39319; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231020-0004/
NetApp published this final advisory covering CVE-2023-39320, CVE-2023-39321, CVE-2023-39322; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231020-0003/
NetApp published this final advisory covering CVE-2023-42503; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231020-0006/
NetApp published this interim advisory covering CVE-2023-4147; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS); NetApp SolidFire & HCI Management Node; NetApp SolidFire & HCI Storage Node (Element Software).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20231020-0005/
NetApp published this final advisory covering CVE-2023-4132; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS).
Open source