GCVE - cpe:2.3:a:netapp:snap_creator_framework:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:netapp:snap_creator_framework:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Netapp (`f19678f6-cb27-5a55-8852-34b249f80ef9`)
Product	Snap Creator Framework (`f36ebb71-90b9-5f99-bc74-2c20da948bb6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-7657`	vulnerable	2026-06-08 05:10:05.668910	Details available In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request. Published: 2018-06-26T16:00:00.000Z Updated: 2024-08-05T16:12:27.850Z Open on db.gcve.eu Reference links https://www.debian.org/security/2018/dsa-4278 http://www.securitytracker.com/id/1041194 https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E https://access.redhat.com/errata/RHSA-2019:0910 https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-7172`	vulnerable	2026-06-08 05:08:12.030494	Details available NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed by an unauthorized user. Published: 2016-12-21T22:00:00.000Z Updated: 2024-08-06T01:50:47.545Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95069 https://kb.netapp.com/support/s/article/NTAP-20161220-0001 http://www.securitytracker.com/id/1037530	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5710`	vulnerable	2026-06-08 05:07:57.558897	Details available NetApp Snap Creator Framework before 4.3P1 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors. Published: 2020-02-10T23:19:09.000Z Updated: 2024-08-06T01:07:59.943Z Open on db.gcve.eu Reference links https://kb.netapp.com/support/s/article/cve-2016-5710-clickjacking-vulnerability-in-snap-creator-framework	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5372`	vulnerable	2026-06-08 05:07:56.881799	Details available Cross-site request forgery (CSRF) vulnerability in NetApp Snap Creator Framework before 4.3.0P1 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors. Published: 2017-02-07T17:00:00.000Z Updated: 2024-08-06T01:01:00.092Z Open on db.gcve.eu Reference links https://security.netapp.com/advisory/ntap-20160622-0001/ https://kb.netapp.com/support/s/article/cve-2016-5372-cross-site-request-forgery-vulnerability-in-snap-creator-framework	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.