Vendor
NetApp
2,559 known vulnerabilities in products by NetApp, 41 of them actively exploited (CISA KEV).
Key figures
2,559
Vulnerabilities
41
Actively exploited (KEV)
8
Used by ransomware
268
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2023-46604 | Apache ActiveMQ Deserialization of Untrusted Data Vulnerability In CISA KEVRansomware | 10.0 | |
| Critical | CVE-2025-24813 | Apache Tomcat Path Equivalence Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomware | 10.0 | |
| Critical | CVE-2017-5638 | Apache Struts Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2021-41773 | Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2021-42013 | Apache HTTP Server Path Traversal Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2021-40438 | mod_proxy SSRF In CISA KEVRansomware | 9.0 | |
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEV | 7.5 | |
| Critical | CVE-2024-1086 | Linux Kernel Use-After-Free Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2017-12615 | Apache Tomcat on Windows Remote Code Execution Vulnerability In CISA KEVRansomware | 8.1 | |
| Critical | CVE-2024-54085 | Redfish Authentication Bypass In CISA KEV | 9.8 | |
| Critical | CVE-2024-38475 | Apache HTTP Server Improper Escaping of Output Vulnerability In CISA KEV | 9.1 | |
| Critical | CVE-2020-1938 | Apache Tomcat Improper Privilege Management Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2016-3427 | Oracle Java SE and JRockit Unspecified Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2016-8735 | Apache Tomcat Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2023-4863 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2020-15999 | Google Chrome FreeType Heap Buffer Overflow Vulnerability In CISA KEV | 9.6 | |
| Critical | CVE-2022-0492 | Linux Kernel Improper Authentication Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2023-41993 | Apple Multiple Products WebKit Code Execution Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2010-1871 | Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2021-39144 | XStream is vulnerable to a Remote Command Execution attack In CISA KEV | 8.5 | |
| Critical | CVE-2025-0411 | 7-Zip Mark-of-the-Web Bypass Vulnerability In CISA KEV | 7.0 | |
| Critical | CVE-2023-4911 | Glibc: buffer overflow in ld.so leading to privilege escalation In CISA KEV | 7.8 | |
| Critical | CVE-2021-22555 | Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE In CISA KEV | 8.3 | |
| Critical | CVE-2018-11776 | Apache Struts Remote Code Execution Vulnerability In CISA KEV | 8.1 |
News
- 58 hardware vulnerabilities: A guide to the threatscsoonline,
- CISA Adds 10 CVEs to Known Exploited Vulnerabilities Catalog, Five with Three-day Mitigation Deadlinessans-newsbites-mail,
- New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extractionthehackernews,
- Scattered Spider Members Sentencedsans-newsbites-mail,
- 16-year-old KVM flaw allows attackers to escape VMs and take over Linux serverscsoonline,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,