Ontap Select Deploy Administration Utility
Approved changes feed: RSS · Atom
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Netapp (f19678f6-cb27-5a55-8852-34b249f80ef9) |
|---|---|
| Product | Ontap Select Deploy Administration Utility (b3fd2a35-eb61-5bb0-8c0a-e8c378820a1f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-21990 |
vulnerable | 2026-06-08 06:29:33.230694 |
Default Privileged Account Credentials Vulnerability in ONTAP Select Deploy administration utility
MEDIUM (5.4)
ONTAP Select Deploy administration utility versions 9.12.1.x,
9.13.1.x and 9.14.1.x contain hard-coded credentials that could allow an
attacker to view Deploy configuration information and modify the
account credentials.
Published: 2024-04-17T19:35:23.599Z
Updated: 2024-08-01T22:35:34.847Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21989 |
vulnerable | 2026-06-08 06:29:33.227737 |
Privilege Escalation Vulnerability in ONTAP Select Deploy administration utility
HIGH (8.1)
ONTAP Select Deploy administration utility versions 9.12.1.x,
9.13.1.x and 9.14.1.x are susceptible to a vulnerability which when
successfully exploited could allow a read-only user to escalate their
privileges.
Published: 2024-04-17T19:32:34.598Z
Updated: 2024-08-01T22:35:34.729Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2097 |
vulnerable | 2026-06-08 05:42:50.263651 |
AES OCB fails to encrypt some bytes
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).
Published: 2022-07-05T10:30:13.658Z
Updated: 2024-09-17T01:06:49.390Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5509 |
vulnerable | 2026-06-08 05:13:59.425329 |
Details available
ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote attacker to enable and use a privileged user account.
Published: 2019-11-21T15:33:19.000Z
Updated: 2024-08-04T20:01:50.830Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5505 |
vulnerable | 2026-06-08 05:13:59.417600 |
Details available
ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext.
Published: 2019-09-24T19:56:11.000Z
Updated: 2024-08-04T20:01:50.649Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17272 |
vulnerable | 2026-06-08 05:13:10.190821 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.