Netapp Storagegrid Webscale — known CVE vulnerabilities

Every CVE whose affected-product data names Netapp Storagegrid Webscale, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2018-5495 — CVSS 9.8 (critical): All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with…
• CVE-2016-10708 — CVSS 7.5 (high): sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an…
• CVE-2016-8610 — CVSS 7.5 (high): A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined…
• CVE-2018-18066 — CVSS 7.5 (high): snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated…
• CVE-2017-12422 — CVSS 6.5 (medium): NetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10.4.0.2 allow remote authenticated users to…
• CVE-2018-18065 — CVSS 6.5 (medium): _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated…