[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frPBCRf0rY_TzPF7ZkM8l-jLh5wg3oDCREWCm8hYXWVg":3,"g5a-ex:netapp\u002Fhci@*":111,"g5a-family:netapp\u002Fhci":113},{"success":4,"data":5},true,{"product":6,"versions":24,"topVulnerabilitiesByEpss":29,"kevVulnerabilities":88,"seoMetadata":89,"meta":108},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":23},"netapp","hci",4,16,0,"2023-08-07",[14,17,19,21],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.4",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.6",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"1.7",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"1.8","Hci by Netapp is a technology product with 4 tracked versions and 16 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[25,26,27,28],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},[30,38,44,50,57,64,69,74,79,84],{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":16,"epssScore":37},"CVE-2017-5753","Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.","2018-01-04",5.6,"v3.1","Medium",0.93838,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":35,"severity":36,"isKev":16,"epssScore":43},"CVE-2021-28169","For Eclipse Jetty versions \u003C= 9.4.40, \u003C= 10.0.2, \u003C= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `\u002Fconcat?\u002F%2557EB-INF\u002Fweb.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.","2021-06-09",5.3,0.7848,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":35,"severity":36,"isKev":16,"epssScore":49},"CVE-2020-27223","In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU usage processing those quality values, resulting in minutes of CPU time exhausted processing those quality values.","2021-02-26",5.2,0.78031,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":35,"severity":55,"isKev":16,"epssScore":56},"CVE-2022-37434","zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs\u002Fnode reference).","2022-08-05",9.8,"Critical",0.18972,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":35,"severity":62,"isKev":16,"epssScore":63},"CVE-2021-3737","A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.","2022-03-04",7.5,"High",0.13166,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":61,"cvssVersion":35,"severity":62,"isKev":16,"epssScore":68},"CVE-2021-42340","The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.","2021-10-14",0.11796,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":61,"cvssVersion":35,"severity":62,"isKev":16,"epssScore":73},"CVE-2018-7185","The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the \"other side\" of an interleaved association causing the victim ntpd to reset its association.","2018-03-06",0.08998,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":61,"cvssVersion":35,"severity":62,"isKev":16,"epssScore":78},"CVE-2022-0391","A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\\r' and '\\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.","2022-02-09",0.08543,{"cveId":80,"description":81,"publishedDate":12,"cvssScore":82,"cvssVersion":35,"severity":36,"isKev":16,"epssScore":83},"CVE-2023-36054","lib\u002Fkadm5\u002Fkadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",6.5,0.02814,{"cveId":85,"description":86,"publishedDate":72,"cvssScore":42,"cvssVersion":35,"severity":36,"isKev":16,"epssScore":87},"CVE-2018-7170","ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.",0.02686,[],{"title":90,"metaDescription":91,"keywords":92,"structuredData":93},"Hci by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Hci by Netapp covering 4 versions with 16 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Hci vulnerabilities, Hci security, Hci CVE, Netapp Hci, Hci threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":94,"@type":95,"name":96,"description":91,"url":97,"manufacturer":98,"applicationCategory":102,"softwareVersion":103,"mainEntity":104},"https:\u002F\u002Fschema.org","SoftwareApplication","Hci","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fhci",{"@type":99,"name":100,"url":101},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","4 versions tracked",{"@type":105,"name":106,"description":107,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Hci Security Vulnerabilities","Security vulnerabilities affecting Hci by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":109,"apiVersion":110},"2026-10-17T12:37:56.713Z","3.0",{"rows":112,"total":11,"capped":16,"failed":11},[],[114,117,120,123,126,129,132,135,138,141,143,146],{"product":115,"cves":116},"hci_management_node",182,{"product":118,"cves":119},"hci_compute_node",134,{"product":121,"cves":122},"hci_storage_node",39,{"product":124,"cves":125},"hci_compute_node_firmware",34,{"product":127,"cves":128},"hci_baseboard_management_controller",33,{"product":130,"cves":131},"hci_bootstrap_os",22,{"product":133,"cves":134},"hci_compute_node_bios",20,{"product":136,"cves":137},"hci_storage_node_bios",14,{"product":139,"cves":140},"hci_h410c_firmware",6,{"product":142,"cves":140},"hci_h410c",{"product":144,"cves":145},"hci_storage_node_firmware",5,{"product":147,"cves":9},"hci_storage_nodes"]