Filtered by vendor Netapp Subscriptions
Filtered by product Snapcenter Server Subscriptions
Total 23 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-5482 1 Netapp 1 Snapcenter Server 2024-11-21 N/A
NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.
CVE-2017-15519 1 Netapp 1 Snapcenter Server 2024-11-21 N/A
Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0.1 and perform the mitigation steps or upgrade to 4.0 following the product documentation.
CVE-2017-15515 1 Netapp 1 Snapcenter Server 2024-11-21 N/A
NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field.