[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAUQS0by75Prs64t9m1QQEqylAr_HSPnE6IfgpDeYRro":3,"g5a-family:netapp\u002Fcloud_manager":234,"g5a-ex:netapp\u002Fcloud_manager@*":235},{"success":4,"data":5},true,{"product":6,"versions":105,"topVulnerabilitiesByEpss":150,"kevVulnerabilities":207,"seoMetadata":212,"meta":231},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":104},"netapp","cloud_manager",44,19,1,"2021-12-18",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"3.4",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"3.4.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"3.4.2",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"3.4.3",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"3.4.4",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"3.4.5",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"3.5",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"3.5.1",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"3.5.2",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"3.5.3",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"3.6",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"3.6.1",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"3.6.2",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"3.6.3",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"3.6.4",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"3.6.5",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"3.6.6",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"3.7",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"3.7.1",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"3.7.2",{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},"3.7.3",{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"3.7.4",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"3.7.5",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"3.8",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"3.8.1",{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},"3.8.2",{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},"3.8.3",{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},"3.8.4",{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},"3.8.5",{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},"3.8.6",{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},"3.8.7",{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},"3.8.9",{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},"3.9",{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},"3.9.1",{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},"3.9.10",{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},"3.9.11",{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},"3.9.2",{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},"3.9.3",{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},"3.9.4",{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},"3.9.5",{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},"3.9.6",{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},"3.9.7",{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},"3.9.8",{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},"3.9.9","Cloud Manager by Netapp is a technology product with 44 tracked versions and 19 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},[151,159,164,170,176,182,188,193,197,203],{"cveId":152,"description":153,"publishedDate":154,"cvssScore":155,"cvssVersion":156,"severity":157,"isKev":4,"epssScore":158},"CVE-2021-44228","Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","2021-12-10",10,"v3.1","Critical",0.99999,{"cveId":160,"description":161,"publishedDate":12,"cvssScore":162,"cvssVersion":156,"severity":163,"isKev":17,"epssScore":158},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.",5.9,"Medium",{"cveId":165,"description":166,"publishedDate":167,"cvssScore":168,"cvssVersion":156,"severity":163,"isKev":17,"epssScore":169},"CVE-2021-31806","An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to a Denial of Service attack (against all clients using the proxy) via HTTP Range request processing.","2021-05-27",6.5,0.95785,{"cveId":171,"description":172,"publishedDate":173,"cvssScore":174,"cvssVersion":156,"severity":163,"isKev":17,"epssScore":175},"CVE-2021-28164","In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to \u002Fcontext\u002F%2e\u002FWEB-INF\u002Fweb.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.","2021-04-01",5.3,0.82371,{"cveId":177,"description":178,"publishedDate":173,"cvssScore":179,"cvssVersion":156,"severity":180,"isKev":17,"epssScore":181},"CVE-2021-28165","In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.",7.5,"High",0.53861,{"cveId":183,"description":184,"publishedDate":185,"cvssScore":186,"cvssVersion":156,"severity":180,"isKev":17,"epssScore":187},"CVE-2021-23337","Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.","2021-02-15",7.2,0.21333,{"cveId":189,"description":190,"publishedDate":191,"cvssScore":168,"cvssVersion":156,"severity":163,"isKev":17,"epssScore":192},"CVE-2021-31807","An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service when delivering responses to HTTP Range requests. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent.","2021-06-08",0.15559,{"cveId":194,"description":195,"publishedDate":167,"cvssScore":179,"cvssVersion":156,"severity":180,"isKev":17,"epssScore":196},"CVE-2021-28651","An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial of service. When resolving a request with the urn: scheme, the parser leaks a small amount of memory. However, there is an unspecified attack methodology that can easily trigger a large amount of memory consumption.",0.0745,{"cveId":198,"description":199,"publishedDate":200,"cvssScore":201,"cvssVersion":156,"severity":180,"isKev":17,"epssScore":202},"CVE-2020-25097","An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbidden by the security controls. This occurs for certain uri_whitespace configuration settings.","2021-03-19",8.6,0.07343,{"cveId":204,"description":205,"publishedDate":167,"cvssScore":168,"cvssVersion":156,"severity":163,"isKev":17,"epssScore":206},"CVE-2021-31808","An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug, it is vulnerable to a Denial of Service attack (against all clients using the proxy). A client sends an HTTP Range request to trigger this.",0.05344,[208],{"cveId":152,"description":153,"publishedDate":154,"cvssScore":155,"severity":157,"isKev":4,"epssScore":158,"cisaVulnName":209,"cisaDateAdded":154,"cisaShortDescription":210,"cisaRequiredAction":211},"Apache Log4j2 Remote Code Execution Vulnerability","Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",{"title":213,"metaDescription":214,"keywords":215,"structuredData":216},"Cloud Manager by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Cloud Manager by Netapp covering 44 versions with 19 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Cloud Manager vulnerabilities, Cloud Manager security, Cloud Manager CVE, Netapp Cloud Manager, Cloud Manager threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Cloud Manager KEV, Cloud Manager exploited vulnerabilities",{"@context":217,"@type":218,"name":219,"description":214,"url":220,"manufacturer":221,"applicationCategory":225,"softwareVersion":226,"mainEntity":227},"https:\u002F\u002Fschema.org","SoftwareApplication","Cloud Manager","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fcloud_manager",{"@type":222,"name":223,"url":224},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","44 versions tracked",{"@type":228,"name":229,"description":230,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Cloud Manager Security Vulnerabilities","Security vulnerabilities affecting Cloud Manager by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":232,"apiVersion":233},"2026-10-17T00:09:16.163Z","3.0",[],{"rows":236,"total":11,"capped":17,"failed":16},[237],{"cveId":152,"name":209,"severity":157,"cvss":155,"added":154,"epss":158,"published":238,"ranges":239,"checked":4,"hits":240,"covers":17},"2021-12-10T10:15:09.143",[],[]]