Approved changes feed: RSS · Atom

cpe:2.3:a:netapp:snapcenter_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetapp (f19678f6-cb27-5a55-8852-34b249f80ef9)
ProductSnapcenter Server (797930f8-a931-519a-9d55-8a3d001f1b64)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-5482 vulnerable 2026-06-08 05:11:51.254454 Details available
NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.
Published: 2019-03-04T23:00:00.000Z
Updated: 2024-09-17T00:16:19.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15519 vulnerable 2026-06-08 05:08:58.886758 Details available
Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0.1 and perform the mitigation steps or upgrade to 4.0 following the product documentation.
Published: 2018-03-06T20:00:00.000Z
Updated: 2024-09-16T18:23:26.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15516 vulnerable 2026-06-08 05:08:58.871366 Details available
NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an unintended authenticated action in the user interface.
Published: 2017-11-16T22:00:00.000Z
Updated: 2024-09-16T23:00:56.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15515 vulnerable 2026-06-08 05:08:58.870991 Details available
NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field.
Published: 2019-03-04T22:00:00.000Z
Updated: 2024-09-17T00:26:02.108Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.