Home / Security / Advisory years / 2017
2017 — NetApp security advisories
61 NetApp advisories published in 2017, newest first. Compiled automatically from the official NetApp advisory API; open a linked advisory for the authoritative affected-versions and fixed-releases tables.
Summaries only. security.netapp.com is the authoritative source.
| Advisory | Published | Title | CVEs |
|---|---|---|---|
| NTAP-20171222-0001 | 2017-12-22 | CVE-2017-13098 Bouncy Castle TLS Vulnerability in NetApp Products | CVE-2017-13098 |
| NTAP-20171215-0001 | 2017-12-15 | CVE-2017-14583 SMB Authentication Denial of Service (DoS) vulnerabilit | CVE-2017-14583 |
| NTAP-20171214-0002 | 2017-12-14 | CVE-2017-7525 Jackson JSON Library Vulnerability in NetApp Products | CVE-2017-7525 |
| NTAP-20171214-0003 | 2017-12-14 | CVE-2017-15095 Jackson JSON Library vulnerability in NetApp Products | CVE-2017-15095 |
| NTAP-20171214-0001 | 2017-12-14 | CVE-2017-15707 Apache Struts Vulnerability in NetApp Products | CVE-2017-15707 |
| NTAP-20171208-0001 | 2017-12-08 | December 2017 OpenSSL Vulnerabilities in NetApp Products | CVE-2017-3737, CVE-2017-3738 |
| NTAP-20171208-0002 | 2017-12-08 | CVE-2016-6904 Plain Text Authentication vulnerability in VASA Provider | CVE-2016-6904 |
| NTAP-20171130-0003 | 2017-11-30 | CVE-2016-6515 OpenSSH Vulnerability in NetApp Products | CVE-2016-6515: OpenSSH vulnerability |
| NTAP-20171130-0001 | 2017-11-30 | CVE-2016-8610 OpenSSL Vulnerability in NetApp Products | CVE-2016-8610 |
| NTAP-20171130-0002 | 2017-11-30 | January 2017 OpenSSH Vulnerabilities in NetApp Products | CVE-2016-10012, CVE-2016-10011 |
| NTAP-20171120-0001 | 2017-11-20 | Intel SA-00086 Management Engine Vulnerabilities in NetApp Products | CVE-2017-5705, CVE-2017-5708 |
| NTAP-20171116-0001 | 2017-11-16 | CVE-2017-15517 AltaVault OST Plug-in Sensitive Information Vulnerabili | CVE-2017-15517 |
| NTAP-20171114-0001 | 2017-11-14 | CVE-2017-15516 Cross-Site Request Forgery Vulnerability in SnapCenter | CVE-2017-15516 |
| NTAP-20171107-0002 | 2017-11-07 | CVE-2017-3736 OpenSSL Vulnerability in NetApp Products | CVE-2017-3736 |
| NTAP-20171107-0001 | 2017-11-07 | CVE-2017-11461 Clickjacking Vulnerability in OnCommand Unified Manager | CVE-2017-11461 |
| NTAP-20171031-0001 | 2017-10-31 | January 2016 Network Time Protocol Daemon (ntpd) Vulnerabilities in Ne | CVE-2015-7979, CVE-2015-7973 |
| NTAP-20171024-0001 | 2017-10-24 | CVE-2017-15361 Infineon RSA Library Vulnerability in NetApp Products | CVE-2017-15361 |
| NTAP-20171019-0001 | 2017-10-19 | October 2017 Java Platform Standard Edition Vulnerabilities in NetApp | CVE-2017-10346, CVE-2017-10285 |
| NTAP-20171019-0002 | 2017-10-19 | October 2017 MySQL Vulnerabilities in NetApp Products | CVE-2017-10155, CVE-2017-10165 |
| NTAP-20171018-0001 | 2017-10-18 | August 2017 Apache Tomcat Vulnerabilities in NetApp Products | CVE-2017-12615, CVE-2017-12616 |
| NTAP-20171018-0002 | 2017-10-18 | CVE-2017-12617 Apache Tomcat Vulnerability in NetApp Products | CVE-2017-12617 |
| NTAP-20171004-0002 | 2017-10-04 | April 2016 Network Time Protocol Daemon (ntpd) Vulnerabilities in Mult | CVE-2015-7704, CVE-2016-1548 |
| NTAP-20171004-0001 | 2017-10-04 | October 2015 Network Time Protocol Daemon (ntpd) Vulnerabilities in Mu | CVE-2015-7871, CVE-2015-7855 |
| NTAP-20170927-0001 | 2017-09-27 | CVE-2017-3735 OpenSSL Vulnerability in Multiple NetApp Products | CVE-2017-3735 |
| NTAP-20170921-0001 | 2017-09-21 | September 2017 Samba Vulnerabilities in NetApp StorageGRID Products | CVE-2017-12150, CVE-2017-12151 |
| NTAP-20170911-0002 | 2017-09-11 | July 2017 Apache httpd Server Vulnerabilities in Multiple NetApp Produ | CVE-2017-9788, CVE-2017-9789 |
| NTAP-20170911-0001 | 2017-09-11 | CVE-2017-12611 Apache Struts Vulnerability in Multiple NetApp Products | CVE-2017-12611 |
| NTAP-20170907-0001 | 2017-09-07 | CVE-2017-9805 Apache Struts Vulnerability in Multiple NetApp Products | CVE-2017-9805 |
| NTAP-20170831-0002 | 2017-08-31 | Unauthorized Read and Remote Code Execution Vulnerabilities in cluster | CVE-2017-12421, CVE-2017-12423 |
| NTAP-20170831-0001 | 2017-08-31 | CVE-2017-14053 Session Cookie Vulnerability in OnCommand Unified Manag | CVE-2017-14053 |
| NTAP-20170831-0003 | 2017-08-31 | CVE-2016-1895 Unsafe User Input String Vulnerability in Data ONTAP | CVE-2016-1895 |
| NTAP-20170825-0001 | 2017-08-25 | CVE-2017-12422 Unauthorized Object Deletion Vulnerability in StorageGR | CVE-2017-12422 |
| NTAP-20170815-0002 | 2017-08-15 | CVE-2017-12859 Denial of Service Vulnerability in Data ONTAP operating | CVE-2017-12859 |
| NTAP-20170815-0001 | 2017-08-15 | CVE-1999-0016 Denial of Service Vulnerability in Data ONTAP | CVE-1999-0016 |
| NTAP-20170814-0001 | 2017-08-14 | CVE-2017-12420 Heap Overflow Vulnerability in clustered Data ONTAP | CVE-2017-12420 |
| NTAP-20170809-0001 | 2017-08-09 | CVE-2017-5201 Sensitive Information Disclosure Vulnerability in Cluste | CVE-2017-5201 |
| NTAP-20170808-0001 | 2017-08-08 | Linux Memory Management Vulnerabilities in NetApp Products | CVE-2017-1000364, CVE-2017-1000365 |
| NTAP-20170803-0001 | 2017-08-03 | June 2017 sudo Vulnerabilities in NetApp Products | CVE-2017-1000367, CVE-2017-1000368 |
| NTAP-20170720-0001 | 2017-07-20 | July 2017 Java Platform Standard Edition Vulnerabilities in Multiple N | CVE-2017-10110, CVE-2017-10089 |
| NTAP-20170720-0002 | 2017-07-20 | July 2017 MySQL Vulnerabilities in Multiple NetApp Products | CVE-2016-4436, CVE-2017-5651 |
| NTAP-20170718-0001 | 2017-07-18 | CVE-2017-8919 Information Disclosure Vulnerability in OnCommand API Se | CVE-2017-8919 |
| NTAP-20170630-0001 | 2017-06-30 | CVE-2017-7947 Information Disclosure Vulnerability in clustered Data O | CVE-2017-7947 |
| NTAP-20170526-0001 | 2017-05-26 | March 2017 Network Time Protocol Daemon (ntpd) Vulnerabilities in Mult | CVE-2017-6464, CVE-2017-6462 |
| NTAP-20170524-0001 | 2017-05-24 | CVE-2017-7494 Samba Remote Code Execution Vulnerability in StorageGRID | CVE-2017-7494 |
| NTAP-20170517-0002 | 2017-05-17 | CVE-2017-7439: Information Disclosure vulnerability in OnCommand Unifi | CVE-2017-7439 |
| NTAP-20170517-0001 | 2017-05-17 | CVE-2017-7236: SQL Injection vulnerability in OnCommand Unified Manage | CVE-2017-7236 |
| NTAP-20170515-0001 | 2017-05-15 | NetApp Product Security Notice for WannaCrypt and Petya Ransomware | CVE-2017-0143, CVE-2017-0144 |
| NTAP-20170509-0001 | 2017-05-09 | CVE-2017-5689 Intel Management Engine Vulnerability in Multiple NetApp | CVE-2017-5689 |
| NTAP-20170420-0001 | 2017-04-20 | April 2017 Java Platform Standard Edition Vulnerabilities in Multiple | CVE-2017-3512, CVE-2017-3514 |
| NTAP-20170420-0002 | 2017-04-20 | April 2017 MySQL Vulnerabilities in Multiple NetApp Products | CVE-2017-3308, CVE-2017-3309 |
| NTAP-20170331-0001 | 2017-03-31 | CVE-2017-5988 Denial of Service Vulnerability in clustered Data ONTAP | CVE-2017-5988 |
| NTAP-20170331-0002 | 2017-03-31 | CVE-2017-7345 JMX RMI Information Disclosure Vulnerability in Multiple | CVE-2017-7345 |
| NTAP-20170323-0001 | 2017-03-23 | CVE-2016-5045 Cluster Peering Vulnerability in OnCommand System Manage | CVE-2016-5045 |
| NTAP-20170310-0002 | 2017-03-10 | November 2016 Network Time Protocol Daemon (ntpd) Vulnerabilities in M | CVE-2016-7426, CVE-2016-7427 |
| NTAP-20170310-0001 | 2017-03-10 | CVE-2017-5638 Apache Struts Vulnerability in Multiple NetApp Products | CVE-2017-5638 |
| NTAP-20170228-0001 | 2017-02-28 | CVE-2017-5995 ONTAP Select Deploy Sensitive Information Vulnerability | CVE-2017-5995 |
| NTAP-20170228-0002 | 2017-02-28 | CVE-2016-5374 Missing SMB Authorization Check Vulnerability in ONTAP 9 | CVE-2016-5374 |
| NTAP-20170131-0001 | 2017-01-31 | CVE-2017-5600 Default Privileged Account Vulnerability in OnCommand In | CVE-2017-5600 |
| NTAP-20170127-0001 | 2017-01-27 | January 2017 OpenSSL Vulnerabilities in Multiple NetApp Products | CVE-2017-3732, CVE-2017-3731 |
| NTAP-20170119-0001 | 2017-01-19 | January 2017 Java Platform Standard Edition Vulnerabilities in Multipl | CVE-2017-3289, CVE-2017-3272 |
| NTAP-20170119-0002 | 2017-01-19 | January 2017 MySQL Vulnerabilities in Multiple NetApp Products | CVE-2016-8318, CVE-2017-3312 |