[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5pcDIDwd04g2rcm_0g7HyiGt5i7RA_l5U33O-5yAVwA":3,"g5a-ex:netapp\u002Fhyper_converged_infrastructure@*":71,"g5a-family:netapp\u002Fhyper_converged_infrastructure":73},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":48,"seoMetadata":49,"meta":68},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"netapp","hyper_converged_infrastructure",0,5,"2019-02-27",[],"Hyper Converged Infrastructure by Netapp is a technology product and 5 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,31,38,42],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2018-18065","_set_key in agent\u002Fhelpers\u002Ftable_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.","2018-10-08",6.5,"v3.0","Medium",false,0.17504,{"cveId":26,"description":27,"publishedDate":11,"cvssScore":28,"cvssVersion":29,"severity":22,"isKev":23,"epssScore":30},"CVE-2019-1559","If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).",5.9,"v3.1",0.17139,{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":21,"severity":36,"isKev":23,"epssScore":37},"CVE-2018-1000656","The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083.","2018-08-20",7.5,"High",0.03855,{"cveId":39,"description":40,"publishedDate":19,"cvssScore":35,"cvssVersion":29,"severity":36,"isKev":23,"epssScore":41},"CVE-2018-18066","snmp_oid_compare in snmplib\u002Fsnmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.",0.0359,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":21,"severity":36,"isKev":23,"epssScore":47},"CVE-2018-12538","In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access\u002Fhijack other HttpSessions and even delete unmatched HttpSessions present in the FileSystem's storage for the FileSessionDataStore.","2018-06-22",8.8,0.02654,[],{"title":50,"metaDescription":51,"keywords":52,"structuredData":53},"Hyper Converged Infrastructure by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Hyper Converged Infrastructure by Netapp with 5 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Hyper Converged Infrastructure vulnerabilities, Hyper Converged Infrastructure security, Hyper Converged Infrastructure CVE, Netapp Hyper Converged Infrastructure, Hyper Converged Infrastructure threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":54,"@type":55,"name":56,"description":51,"url":57,"manufacturer":58,"applicationCategory":62,"softwareVersion":63,"mainEntity":64},"https:\u002F\u002Fschema.org","SoftwareApplication","Hyper Converged Infrastructure","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fhyper_converged_infrastructure",{"@type":59,"name":60,"url":61},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":65,"name":66,"description":67,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Hyper Converged Infrastructure Security Vulnerabilities","Security vulnerabilities affecting Hyper Converged Infrastructure by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":69,"apiVersion":70},"2026-10-18T00:22:44.712Z","3.0",{"rows":72,"total":9,"capped":23,"failed":9},[],[74],{"product":75,"cves":76},"hyper_converged_infrastructure_compute_node",1]