[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFlq-j3TRKfMJ9yhoPuN7jp56H1W146qekELtvibUc1Q":3,"g5a-family:netapp\u002Fh700s_firmware":157,"g5a-ex:netapp\u002Fh700s_firmware@*":158},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":78,"seoMetadata":135,"meta":154},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"netapp","h700s_firmware",0,274,7,"2025-03-11",[],"H700s Firmware by Netapp is a technology product and 274 known security vulnerabilities including 7 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,26,33,39,44,49,56,61,67,73],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":25},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,"v3.1","Medium",false,0.99215,{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":22,"severity":31,"isKev":24,"epssScore":32},"CVE-2022-2068","In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","2022-06-21",7.3,"High",0.96391,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":22,"severity":31,"isKev":4,"epssScore":38},"CVE-2022-0847","A flaw was found in the way the \"flags\" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.","2022-03-10",7.8,0.92795,{"cveId":40,"description":41,"publishedDate":20,"cvssScore":42,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":43},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.",6.9,0.84887,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":30,"cvssVersion":22,"severity":31,"isKev":24,"epssScore":48},"CVE-2022-1292","The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).","2022-05-03",0.82612,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":22,"severity":54,"isKev":24,"epssScore":55},"CVE-2021-25216","In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicitly setting values for the tkey-gssapi-keytab or tkey-gssapi-credential configuration options. Although the default configuration is not vulnerable, GSS-TSIG is frequently used in networks where BIND is integrated with Samba, as well as in mixed-server environments that combine BIND servers with Active Directory domain controllers. For servers that meet these conditions, the ISC SPNEGO implementation is vulnerable to various attacks, depending on the CPU architecture for which BIND was built: For named binaries compiled for 64-bit platforms, this flaw can be used to trigger a buffer over-read, leading to a server crash. For named binaries compiled for 32-bit platforms, this flaw can be used to trigger a server crash due to a buffer overflow and possibly also to achieve remote code execution. We have determined that standard SPNEGO implementations are available in the MIT and Heimdal Kerberos libraries, which support a broad range of operating systems, rendering the ISC implementation unnecessary and obsolete. Therefore, to reduce the attack surface for BIND users, we will be removing the ISC SPNEGO implementation in the April releases of BIND 9.11 and 9.16 (it had already been dropped from BIND 9.17). We would not normally remove something from a stable ESV (Extended Support Version) of BIND, but since system libraries can replace the ISC SPNEGO implementation, we have made an exception in this case for reasons of stability and security.","2021-04-29",9.8,"Critical",0.82367,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":37,"cvssVersion":22,"severity":31,"isKev":4,"epssScore":60},"CVE-2019-2215","A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","2019-10-11",0.72105,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":22,"severity":31,"isKev":24,"epssScore":66},"CVE-2022-0435","A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.","2022-03-25",8.8,0.6777,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":22,"severity":31,"isKev":24,"epssScore":72},"CVE-2024-6119","Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.","2024-09-03",7.5,0.66582,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":53,"cvssVersion":22,"severity":54,"isKev":24,"epssScore":77},"CVE-2022-29155","In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","2022-05-04",0.64487,[79,87,95,100,110,118,123,131],{"cveId":80,"description":81,"publishedDate":64,"cvssScore":37,"severity":31,"isKev":4,"epssScore":82,"cisaVulnName":83,"cisaDateAdded":84,"cisaShortDescription":85,"cisaRequiredAction":86},"CVE-2022-0995","An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.",0.08859,"Linux Kernel Out-of-Bounds Write Vulnerability","2026-08-26","Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":88,"description":89,"publishedDate":12,"cvssScore":53,"severity":54,"isKev":4,"epssScore":90,"cisaVulnName":91,"cisaDateAdded":92,"cisaShortDescription":93,"cisaRequiredAction":94},"CVE-2024-54085","AMI’s SPx contains\na vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation\nof this vulnerability may lead to a loss of confidentiality, integrity, and\u002For\navailability.",0.60747,"AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability","2025-06-25","AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and\u002For availability.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":40,"description":41,"publishedDate":20,"cvssScore":42,"severity":23,"isKev":4,"epssScore":43,"cisaVulnName":96,"cisaDateAdded":97,"cisaShortDescription":98,"cisaRequiredAction":99},"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":101,"description":102,"publishedDate":103,"cvssScore":104,"severity":31,"isKev":4,"epssScore":105,"cisaVulnName":106,"cisaDateAdded":107,"cisaShortDescription":108,"cisaRequiredAction":109},"CVE-2022-0185","A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.","2022-02-11",8.4,0.25151,"Linux Kernel Heap-Based Buffer Overflow Vulnerability","2024-08-21","Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and ultimately escalate privileges.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"cveId":111,"description":112,"publishedDate":113,"cvssScore":37,"severity":31,"isKev":4,"epssScore":114,"cisaVulnName":115,"cisaDateAdded":116,"cisaShortDescription":117,"cisaRequiredAction":99},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",0.63769,"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.",{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"severity":31,"isKev":4,"epssScore":38,"cisaVulnName":119,"cisaDateAdded":120,"cisaShortDescription":121,"cisaRequiredAction":122},"Linux Kernel Privilege Escalation Vulnerability","2022-04-25","Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\"","Apply updates per vendor instructions.",{"cveId":124,"description":125,"publishedDate":126,"cvssScore":127,"severity":23,"isKev":4,"epssScore":128,"cisaVulnName":119,"cisaDateAdded":129,"cisaShortDescription":130,"cisaRequiredAction":122},"CVE-2021-22600","A double free bug in packet_set_ring() in net\u002Fpacket\u002Faf_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755","2022-01-26",6.6,0.06586,"2022-04-11","Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.",{"cveId":57,"description":58,"publishedDate":59,"cvssScore":37,"severity":31,"isKev":4,"epssScore":60,"cisaVulnName":132,"cisaDateAdded":133,"cisaShortDescription":134,"cisaRequiredAction":122},"Android Kernel Use-After-Free Vulnerability","2021-11-03","Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"",{"title":136,"metaDescription":137,"keywords":138,"structuredData":139},"H700s Firmware by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for H700s Firmware by Netapp with 274 tracked vulnerabilities including 1 critical and 5 high-severity issues and 7 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","H700s Firmware vulnerabilities, H700s Firmware security, H700s Firmware CVE, Netapp H700s Firmware, H700s Firmware threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, H700s Firmware KEV, H700s Firmware exploited vulnerabilities",{"@context":140,"@type":141,"name":142,"description":137,"url":143,"manufacturer":144,"applicationCategory":148,"softwareVersion":149,"mainEntity":150},"https:\u002F\u002Fschema.org","SoftwareApplication","H700s Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fh700s_firmware",{"@type":145,"name":146,"url":147},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":151,"name":152,"description":153,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","H700s Firmware Security Vulnerabilities","Security vulnerabilities affecting H700s Firmware by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":155,"apiVersion":156},"2026-10-18T15:49:00.607Z","3.0",[],{"rows":159,"total":192,"capped":24,"failed":9},[160,164,168,172,176,180,184,188],{"cveId":80,"name":83,"severity":31,"cvss":37,"added":84,"epss":82,"published":161,"ranges":162,"checked":4,"hits":163,"covers":24},"2022-03-25T19:15:10.52",[],[],{"cveId":88,"name":91,"severity":54,"cvss":53,"added":92,"epss":90,"published":165,"ranges":166,"checked":4,"hits":167,"covers":24},"2025-03-11T14:15:22.893",[],[],{"cveId":40,"name":96,"severity":23,"cvss":42,"added":97,"epss":43,"published":169,"ranges":170,"checked":4,"hits":171,"covers":24},"2020-04-29T21:15:11.743",[],[],{"cveId":101,"name":106,"severity":31,"cvss":104,"added":107,"epss":105,"published":173,"ranges":174,"checked":4,"hits":175,"covers":24},"2022-02-11T18:15:10.89",[],[],{"cveId":111,"name":115,"severity":31,"cvss":37,"added":116,"epss":114,"published":177,"ranges":178,"checked":4,"hits":179,"covers":24},"2023-10-03T18:15:10.463",[],[],{"cveId":34,"name":119,"severity":31,"cvss":37,"added":120,"epss":38,"published":181,"ranges":182,"checked":4,"hits":183,"covers":24},"2022-03-10T17:44:57.283",[],[],{"cveId":124,"name":119,"severity":23,"cvss":127,"added":129,"epss":128,"published":185,"ranges":186,"checked":4,"hits":187,"covers":24},"2022-01-26T14:15:08.123",[],[],{"cveId":57,"name":132,"severity":31,"cvss":37,"added":133,"epss":60,"published":189,"ranges":190,"checked":4,"hits":191,"covers":24},"2019-10-11T19:15:10.947",[],[],8]