[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_Wv7xHLA23DeqAVxblj7KgZ2db6hGfsPUxEFrdUakUk":3,"g5a-ex:netapp\u002Fsantricity_cloud_connector@*":94,"g5a-family:netapp\u002Fsantricity_cloud_connector":96},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":71,"seoMetadata":72,"meta":91},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"netapp","santricity_cloud_connector",0,27,"2021-06-22",[],"Santricity Cloud Connector by Netapp is a technology product and 27 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,33,38,42,47,51,58,62,67],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2017-15715","In Apache httpd 2.4.0 to 2.4.29, the expression specified in \u003CFilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename.","2018-03-26",8.1,"v3.0","High",false,0.85452,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":23,"epssScore":32},"CVE-2021-28164","In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to \u002Fcontext\u002F%2e\u002FWEB-INF\u002Fweb.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.","2021-04-01",5.3,"v3.1","Medium",0.82371,{"cveId":34,"description":35,"publishedDate":19,"cvssScore":36,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":37},"CVE-2018-1303","A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. The vulnerability is considered as low risk since mod_cache_socache is not widely used, mod_cache_disk is not concerned by this vulnerability.",7.5,0.69802,{"cveId":39,"description":40,"publishedDate":28,"cvssScore":36,"cvssVersion":30,"severity":22,"isKev":23,"epssScore":41},"CVE-2021-28165","In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.",0.53861,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":36,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":46},"CVE-2018-17199","In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.","2019-01-30",0.20156,{"cveId":48,"description":49,"publishedDate":45,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":23,"epssScore":50},"CVE-2018-17189","In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP\u002F2 (mod_http2) connections.",0.20071,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":30,"severity":56,"isKev":23,"epssScore":57},"CVE-2017-7658","In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP\u002F1.x configurations), and 9.4.x (all HTTP\u002F1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization.","2018-06-26",9.8,"Critical",0.19362,{"cveId":59,"description":60,"publishedDate":19,"cvssScore":36,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":61},"CVE-2017-15710","In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset encoding when verifying the user's credentials. If the header value is not present in the charset conversion table, a fallback mechanism is used to truncate it to a two characters value to allow a quick retry (for example, 'en-US' is truncated to 'en'). A header value of less than two characters forces an out of bound write of one NUL byte to a memory location that is not part of the string. In the worst case, quite unlikely, the process would crash which could be used as a Denial of Service attack. In the more likely case, this memory is already reserved for future use and the issue has no effect at all.",0.17084,{"cveId":63,"description":64,"publishedDate":19,"cvssScore":65,"cvssVersion":21,"severity":31,"isKev":23,"epssScore":66},"CVE-2018-1301","A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode (both log and build level), so it is classified as low risk for common server usage.",5.9,0.14991,{"cveId":68,"description":69,"publishedDate":54,"cvssScore":55,"cvssVersion":30,"severity":56,"isKev":23,"epssScore":70},"CVE-2017-7657","In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request.",0.14879,[],{"title":73,"metaDescription":74,"keywords":75,"structuredData":76},"Santricity Cloud Connector by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Santricity Cloud Connector by Netapp with 27 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Santricity Cloud Connector vulnerabilities, Santricity Cloud Connector security, Santricity Cloud Connector CVE, Netapp Santricity Cloud Connector, Santricity Cloud Connector threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":77,"@type":78,"name":79,"description":74,"url":80,"manufacturer":81,"applicationCategory":85,"softwareVersion":86,"mainEntity":87},"https:\u002F\u002Fschema.org","SoftwareApplication","Santricity Cloud Connector","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fsantricity_cloud_connector",{"@type":82,"name":83,"url":84},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":88,"name":89,"description":90,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Santricity Cloud Connector Security Vulnerabilities","Security vulnerabilities affecting Santricity Cloud Connector by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":92,"apiVersion":93},"2026-10-17T18:14:05.820Z","3.0",{"rows":95,"total":9,"capped":23,"failed":9},[],[]]