[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7cHIWYC8PMBTrMd2iVsuWhNlLqRZmOlo30Dj5egICYg":3,"g5a-ex:netapp\u002Fstorage_automation_store@*":101,"g5a-family:netapp\u002Fstorage_automation_store":103},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":78,"seoMetadata":79,"meta":98},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"netapp","storage_automation_store",0,113,"2019-04-18",[],"Storage Automation Store by Netapp is a technology product and 113 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,32,39,44,50,55,60,67,72],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2018-10933","A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.","2018-10-17",9.1,"v3.0","Critical",false,0.91789,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":22,"isKev":23,"epssScore":31},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",9.8,"v3.1",0.89792,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":21,"severity":37,"isKev":23,"epssScore":38},"CVE-2017-15715","In Apache httpd 2.4.0 to 2.4.29, the expression specified in \u003CFilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename.","2018-03-26",8.1,"High",0.85452,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":29,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":43},"CVE-2019-0192","In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.","2019-03-07",0.78227,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":21,"severity":37,"isKev":23,"epssScore":49},"CVE-2019-6977","gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.","2019-01-27",8.8,0.71496,{"cveId":51,"description":52,"publishedDate":35,"cvssScore":53,"cvssVersion":21,"severity":37,"isKev":23,"epssScore":54},"CVE-2018-1303","A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. The vulnerability is considered as low risk since mod_cache_socache is not widely used, mod_cache_disk is not concerned by this vulnerability.",7.5,0.69802,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":59},"CVE-2017-9788","In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.","2017-07-13",0.5677,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":21,"severity":65,"isKev":23,"epssScore":66},"CVE-2018-11763","In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP\u002F2 connections. A possible mitigation is to not enable the h2 protocol.","2018-09-25",5.9,"Medium",0.50847,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":53,"cvssVersion":21,"severity":37,"isKev":23,"epssScore":71},"CVE-2017-16642","In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext\u002Fdate\u002Flib\u002Fparse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.","2017-11-07",0.26373,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":30,"severity":65,"isKev":23,"epssScore":77},"CVE-2019-6110","In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.","2019-01-31",6.8,0.24901,[],{"title":80,"metaDescription":81,"keywords":82,"structuredData":83},"Storage Automation Store by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Storage Automation Store by Netapp with 113 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Storage Automation Store vulnerabilities, Storage Automation Store security, Storage Automation Store CVE, Netapp Storage Automation Store, Storage Automation Store threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":84,"@type":85,"name":86,"description":81,"url":87,"manufacturer":88,"applicationCategory":92,"softwareVersion":93,"mainEntity":94},"https:\u002F\u002Fschema.org","SoftwareApplication","Storage Automation Store","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fstorage_automation_store",{"@type":89,"name":90,"url":91},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":95,"name":96,"description":97,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Storage Automation Store Security Vulnerabilities","Security vulnerabilities affecting Storage Automation Store by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":99,"apiVersion":100},"2026-10-17T16:21:48.320Z","3.0",{"rows":102,"total":9,"capped":23,"failed":9},[],[]]