Product by NetApp
Solidfire \& Hci Storage Node
26 known vulnerabilities in Solidfire \& Hci Storage Node (NetApp), 1 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 74 other products | 10.0 | |
| High | CVE-2023-5178 | Kernel: use after free in nvmet_tcp_free_crypto in nvme | 8.8 | |
| High | CVE-2022-36946 | Kernel: Denial of Service | 7.5 | |
| Critical | CVE-2023-38428 | NetApp H300s: Out-of-Bounds Read | 9.1 | |
| Critical | CVE-2023-38426 | NetApp H300s: Out-of-Bounds Read | 9.1 | |
| High | CVE-2018-20836 | F5 Traffix Signaling Delivery Controller (SDC): Use-After-Free | 8.1 | |
| Critical | CVE-2023-38432 | NetApp H300s: Out-of-Bounds Read | 9.1 | |
| High | CVE-2022-27775 | Https://github.com/curl/curl: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| High | CVE-2023-32257 | Session race condition remote code execution vulnerability | 8.1 | |
| Medium | CVE-2022-27776 | Https://github.com/curl/curl: Insufficiently Protected Credentials | 6.5 | |
| High | CVE-2022-22576 | Https://github.com/curl/curl: Improper Authentication | 8.1 | |
| High | CVE-2022-2048 | The Eclipse Foundation Eclipse Jetty: Insufficient Resource Pool | 7.5 | |
| High | CVE-2020-25645 | Kernel: Cleartext Transmission of Sensitive Information | 7.5 | |
| High | CVE-2025-0725 | gzip integer overflow | 7.3 | |
| Critical | CVE-2024-40896 | Libxml2: Improper Restriction of XML External Entity Reference | 9.1 | |
| Medium | CVE-2022-27774 | Https://github.com/curl/curl: Insufficiently Protected Credentials | 5.7 | |
| Medium | CVE-2021-3772 | Kernel: Improper Validation of Integrity Check Value | 6.5 | |
| Medium | CVE-2024-50602 | libexpat Project libexpat: security vulnerability | 5.9 | |
| Critical | CVE-2024-36958 | Linux Kernel: security vulnerability | 9.8 | |
| Medium | CVE-2020-12464 | Kernel: Use-After-Free | 6.7 | |
| Critical | CVE-2023-37920 | Certifi's removal of e-Tugra root certificate | 7.5 | |
| Low | CVE-2022-2047 | The Eclipse Foundation Eclipse Jetty: Improper Input Validation | 2.7 | |
| High | CVE-2020-29569 | NetApp Solidfire \& Hci Management Node: Information Disclosure | 8.8 | |
| High | CVE-2024-33602 | nscd: netgroup cache assumes NSS callback uses in-buffer strings | 7.4 | |
| Low | CVE-2025-0167 | netrc and default credential leak | 3.4 |
News
- SSA-397453 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Energy TraceAlertServerPLUSsiemens-productcert
- SSA-714170 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000siemens-productcert
- SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
- SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert
- SSA-146325 V1.0: Multiple Vulnerabilities in RUGGEDCOM ROX before V2.16siemens-productcert