CVE-2023-27312
CVE-2023-27312 is a medium-severity vulnerability in Netapp Snapcenter Plug-in with a CVSS 3.x base score of 5.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-250.
Key facts
- Severity: Medium (CVSS 3.x base score 5.4)
- EPSS exploit prediction: 0% (22nd percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-250
- Affected product: Netapp Snapcenter Plug-in
- Published:
- Last modified:
Description
SnapCenter Plugin for VMware vSphere versions 4.6 prior to 4.9 are susceptible to a vulnerability which may allow authenticated unprivileged users to modify email and snapshot name settings within the VMware vSphere user interface.
Frequently asked questions
- What is CVE-2023-27312?
- SnapCenter Plugin for VMware vSphere versions 4.6 prior to 4.9 are susceptible to a vulnerability which may allow authenticated unprivileged users to modify email and snapshot name settings within the VMware vSphere user interface.
- How severe is CVE-2023-27312?
- CVE-2023-27312 has a CVSS 3.x base score of 5.4, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity low, and availability none.
- Is CVE-2023-27312 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (22nd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2023-27312?
- CVE-2023-27312 affects Netapp Snapcenter Plug-in. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2023-27312?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2023-27312 published?
- CVE-2023-27312 was published on 2023-10-12 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:a:netapp:snapcenter_plug-in:*:*:*:*:*:vmware_vsphere:*:*
More vulnerabilities in Netapp Snapcenter Plug-in
- CVE-2019-10219 — Medium (CVSS 6.1): A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads…
- CVE-2021-34429 — Medium (CVSS 5.3): For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded…
- CVE-2021-28164 — Medium (CVSS 5.3): In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that…
- CVE-2021-28163 — Low (CVSS 2.7): In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps…
All CVEs affecting Netapp Snapcenter Plug-in →
Other CWE-250 vulnerabilities
- CVE-2026-4606 — Critical (CVSS 10.0): GV Edge Recording Manager (ERM) v2.3.1 improperly runs application components with SYSTEM-level privileges, allowing…
- CVE-2022-2634 — Critical (CVSS 10.0): An attacker may be able to execute malicious actions due to the lack of device access protections and device…
- CVE-2026-48584 — Critical (CVSS 9.9): Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a…
- CVE-2026-50566 — Critical (CVSS 9.9): Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and…
- CVE-2026-44477 — Critical (CVSS 9.9): CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and…
- CVE-2026-25212 — Critical (CVSS 9.9): An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser…