[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXPI3BqZdTvlfFEs8aXjNeVJK4RR_X21s--XI_9E9O48":3,"g5a-family:netapp\u002Fstoragegrid":329,"g5a-ex:netapp\u002Fstoragegrid@*":338},{"success":4,"data":5},true,{"product":6,"versions":165,"topVulnerabilitiesByEpss":240,"kevVulnerabilities":298,"seoMetadata":307,"meta":326},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":164},"netapp","storagegrid",74,72,2,"2025-09-19",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152,154,156,158,160,162],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"11.1.1.10",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"11.1.1.11",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"11.2",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"11.2.0.5",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"11.2.0.6",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"11.2.0.7",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"11.2.0.8",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"11.3",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"11.3.0.1",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"11.3.0.10",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"11.3.0.11",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"11.3.0.12",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"11.3.0.3",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"11.3.0.4",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"11.3.0.5",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"11.3.0.6",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"11.3.0.8",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"11.4.0",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"11.4.0.1",{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},"11.4.0.2",{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"11.4.0.3",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"11.4.0.4",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"11.4.0.5",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"11.4.0.6",{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},"11.5.0",{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},"11.5.0.1",{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},"11.5.0.2",{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},"11.5.0.3",{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},"11.5.0.4",{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},"11.5.0.5",{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},"11.6.0",{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},"11.6.0.13",{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},"11.7.0",{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},"11.7.0.3",{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},"11.7.0.4",{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},"11.7.0.5",{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},"11.7.0.6",{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},"11.7.0.8",{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},"11.7.0.9",{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},"11.8.0",{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},"11.8.0.1",{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},"11.8.0.11",{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},"11.8.0.12",{"version":105,"cve_count":16,"kev_count":16,"has_kev":17},"11.8.0.13",{"version":107,"cve_count":16,"kev_count":16,"has_kev":17},"11.8.0.14",{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},"11.8.0.15",{"version":111,"cve_count":16,"kev_count":16,"has_kev":17},"11.8.0.2",{"version":113,"cve_count":16,"kev_count":16,"has_kev":17},"11.8.0.3",{"version":115,"cve_count":16,"kev_count":16,"has_kev":17},"11.8.0.5",{"version":117,"cve_count":16,"kev_count":16,"has_kev":17},"11.8.0.6",{"version":119,"cve_count":16,"kev_count":16,"has_kev":17},"11.8.0.7",{"version":121,"cve_count":16,"kev_count":16,"has_kev":17},"11.8.0.8",{"version":123,"cve_count":16,"kev_count":16,"has_kev":17},"11.8.0.9",{"version":125,"cve_count":16,"kev_count":16,"has_kev":17},"11.9.0",{"version":127,"cve_count":16,"kev_count":16,"has_kev":17},"11.9.0.1",{"version":129,"cve_count":16,"kev_count":16,"has_kev":17},"11.9.0.2",{"version":131,"cve_count":16,"kev_count":16,"has_kev":17},"11.9.0.3",{"version":133,"cve_count":16,"kev_count":16,"has_kev":17},"11.9.0.4",{"version":135,"cve_count":16,"kev_count":16,"has_kev":17},"11.9.0.5",{"version":137,"cve_count":16,"kev_count":16,"has_kev":17},"11.9.0.6",{"version":139,"cve_count":16,"kev_count":16,"has_kev":17},"11.9.0.7",{"version":141,"cve_count":16,"kev_count":16,"has_kev":17},"11.9.0.8",{"version":143,"cve_count":16,"kev_count":16,"has_kev":17},"11.9.0.9",{"version":145,"cve_count":16,"kev_count":16,"has_kev":17},"7.5.5",{"version":147,"cve_count":16,"kev_count":16,"has_kev":17},"8.0.6",{"version":149,"cve_count":16,"kev_count":16,"has_kev":17},"8.1.3",{"version":151,"cve_count":16,"kev_count":16,"has_kev":17},"8.5.0",{"version":153,"cve_count":16,"kev_count":16,"has_kev":17},"8.5.1",{"version":155,"cve_count":16,"kev_count":16,"has_kev":17},"8.5.3",{"version":157,"cve_count":16,"kev_count":16,"has_kev":17},"9.0.0",{"version":159,"cve_count":16,"kev_count":16,"has_kev":17},"9.0.1",{"version":161,"cve_count":16,"kev_count":16,"has_kev":17},"9.0.2",{"version":163,"cve_count":16,"kev_count":16,"has_kev":17},"9.0.4","Storagegrid by Netapp is a technology product with 74 tracked versions and 72 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},{"version":105,"cve_count":16,"kev_count":16,"has_kev":17},{"version":107,"cve_count":16,"kev_count":16,"has_kev":17},{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},{"version":111,"cve_count":16,"kev_count":16,"has_kev":17},{"version":113,"cve_count":16,"kev_count":16,"has_kev":17},{"version":115,"cve_count":16,"kev_count":16,"has_kev":17},{"version":117,"cve_count":16,"kev_count":16,"has_kev":17},{"version":119,"cve_count":16,"kev_count":16,"has_kev":17},{"version":121,"cve_count":16,"kev_count":16,"has_kev":17},{"version":123,"cve_count":16,"kev_count":16,"has_kev":17},{"version":125,"cve_count":16,"kev_count":16,"has_kev":17},{"version":127,"cve_count":16,"kev_count":16,"has_kev":17},{"version":129,"cve_count":16,"kev_count":16,"has_kev":17},{"version":131,"cve_count":16,"kev_count":16,"has_kev":17},{"version":133,"cve_count":16,"kev_count":16,"has_kev":17},{"version":135,"cve_count":16,"kev_count":16,"has_kev":17},{"version":137,"cve_count":16,"kev_count":16,"has_kev":17},{"version":139,"cve_count":16,"kev_count":16,"has_kev":17},{"version":141,"cve_count":16,"kev_count":16,"has_kev":17},{"version":143,"cve_count":16,"kev_count":16,"has_kev":17},{"version":145,"cve_count":16,"kev_count":16,"has_kev":17},{"version":147,"cve_count":16,"kev_count":16,"has_kev":17},{"version":149,"cve_count":16,"kev_count":16,"has_kev":17},{"version":151,"cve_count":16,"kev_count":16,"has_kev":17},{"version":153,"cve_count":16,"kev_count":16,"has_kev":17},{"version":155,"cve_count":16,"kev_count":16,"has_kev":17},{"version":157,"cve_count":16,"kev_count":16,"has_kev":17},{"version":159,"cve_count":16,"kev_count":16,"has_kev":17},{"version":161,"cve_count":16,"kev_count":16,"has_kev":17},{"version":163,"cve_count":16,"kev_count":16,"has_kev":17},[241,249,255,263,269,273,278,282,289,293],{"cveId":242,"description":243,"publishedDate":244,"cvssScore":245,"cvssVersion":246,"severity":247,"isKev":4,"epssScore":248},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16",9,"v3.1","Critical",0.99999,{"cveId":250,"description":251,"publishedDate":252,"cvssScore":253,"cvssVersion":246,"severity":247,"isKev":4,"epssScore":254},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.","2016-04-21",9.8,0.92334,{"cveId":256,"description":257,"publishedDate":258,"cvssScore":259,"cvssVersion":260,"severity":261,"isKev":17,"epssScore":262},"CVE-2017-15715","In Apache httpd 2.4.0 to 2.4.29, the expression specified in \u003CFilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename.","2018-03-26",8.1,"v3.0","High",0.85452,{"cveId":264,"description":265,"publishedDate":266,"cvssScore":267,"cvssVersion":246,"severity":261,"isKev":17,"epssScore":268},"CVE-2022-0778","The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","2022-03-15",7.5,0.73188,{"cveId":270,"description":271,"publishedDate":258,"cvssScore":267,"cvssVersion":260,"severity":261,"isKev":17,"epssScore":272},"CVE-2018-1303","A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. The vulnerability is considered as low risk since mod_cache_socache is not widely used, mod_cache_disk is not concerned by this vulnerability.",0.69802,{"cveId":274,"description":275,"publishedDate":276,"cvssScore":253,"cvssVersion":246,"severity":247,"isKev":17,"epssScore":277},"CVE-2025-25292","ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 contain a patch for the issue.","2025-03-12",0.65086,{"cveId":279,"description":280,"publishedDate":244,"cvssScore":267,"cvssVersion":246,"severity":261,"isKev":17,"epssScore":281},"CVE-2021-34798","Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.",0.64509,{"cveId":283,"description":284,"publishedDate":285,"cvssScore":286,"cvssVersion":246,"severity":287,"isKev":17,"epssScore":288},"CVE-2021-3449","An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).","2021-03-25",5.9,"Medium",0.63542,{"cveId":290,"description":291,"publishedDate":244,"cvssScore":267,"cvssVersion":246,"severity":261,"isKev":17,"epssScore":292},"CVE-2021-36160","A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).",0.62887,{"cveId":294,"description":295,"publishedDate":296,"cvssScore":267,"cvssVersion":246,"severity":261,"isKev":17,"epssScore":297},"CVE-2017-7668","The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.","2017-06-20",0.57472,[299,304],{"cveId":250,"description":251,"publishedDate":252,"cvssScore":253,"severity":247,"isKev":4,"epssScore":254,"cisaVulnName":300,"cisaDateAdded":301,"cisaShortDescription":302,"cisaRequiredAction":303},"Oracle Java SE and JRockit Unspecified Vulnerability","2023-05-12","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.","Apply updates per vendor instructions.",{"cveId":242,"description":243,"publishedDate":244,"cvssScore":245,"severity":247,"isKev":4,"epssScore":248,"cisaVulnName":305,"cisaDateAdded":306,"cisaShortDescription":243,"cisaRequiredAction":303},"Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01",{"title":308,"metaDescription":309,"keywords":310,"structuredData":311},"Storagegrid by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Storagegrid by Netapp covering 74 versions with 72 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Storagegrid vulnerabilities, Storagegrid security, Storagegrid CVE, Netapp Storagegrid, Storagegrid threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Storagegrid KEV, Storagegrid exploited vulnerabilities",{"@context":312,"@type":313,"name":314,"description":309,"url":315,"manufacturer":316,"applicationCategory":320,"softwareVersion":321,"mainEntity":322},"https:\u002F\u002Fschema.org","SoftwareApplication","Storagegrid","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fstoragegrid",{"@type":317,"name":318,"url":319},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","74 versions tracked",{"@type":323,"name":324,"description":325,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Storagegrid Security Vulnerabilities","Security vulnerabilities affecting Storagegrid by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":327,"apiVersion":328},"2026-10-17T18:14:06.036Z","3.0",[330,333,335],{"product":331,"cves":332},"storagegrid_webscale",6,{"product":334,"cves":11},"storagegrid_webscale_nas_bridge",{"product":336,"cves":337},"storagegrid_firmware",1,{"rows":339,"total":11,"capped":17,"failed":16},[340,345],{"cveId":250,"name":300,"severity":247,"cvss":253,"added":301,"epss":254,"published":341,"ranges":342,"checked":4,"hits":344,"covers":17},"2016-04-21T11:00:21.667",[343],"up to 9.0.4",[],{"cveId":242,"name":305,"severity":247,"cvss":245,"added":306,"epss":248,"published":346,"ranges":347,"checked":4,"hits":348,"covers":17},"2021-09-16T15:15:07.633",[],[]]