Storagegrid (Formerly Storagegrid Webscale)
Approved changes feed: RSS · Atom
cpe:2.3:a:netapp:storagegrid_(formerly_storagegrid_webscale):*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Netapp (f19678f6-cb27-5a55-8852-34b249f80ef9) |
|---|---|
| Product | Storagegrid (Formerly Storagegrid Webscale) (6e287ee5-bf71-5619-88ee-116cff34ddf5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-22063 |
vulnerable | 2026-11-03 10:17:32.528490 |
CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.
Published: 2026-10-27T22:20:43.242Z
Updated: 2026-11-04T16:38:31.633Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22051 |
vulnerable | 2026-06-08 07:49:17.635318 |
Details available
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an authenticated attacker with low privileges to run arbitrary metrics queries, revealing metric results that they do not have access to.
Published: 2026-04-20T21:27:36.822Z
Updated: 2026-04-21T13:40:46.948Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22048 |
vulnerable | 2026-06-08 07:49:17.625371 |
Details available
HIGH (7.1)
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources.
Published: 2026-02-17T23:01:30.331Z
Updated: 2026-02-18T13:44:08.177Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21988 |
vulnerable | 2026-06-08 06:29:33.223364 |
CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale)
MEDIUM (5.3)
StorageGRID (formerly StorageGRID Webscale) versions prior to
11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive
information via complex MiTM attacks due to a vulnerability in the SSH
cryptographic implementation.
Published: 2024-06-14T21:37:46.450Z
Updated: 2024-11-12T20:02:20.694Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27318 |
vulnerable | 2026-06-08 05:57:40.858330 |
Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)
MEDIUM (6.5)
StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through
11.6.0.13 are susceptible to a Denial of Service (DoS) vulnerability. A
successful exploit could lead to a crash of the Local Distribution
Router (LDR) service.
Published: 2024-02-05T20:35:27.521Z
Updated: 2024-08-02T12:09:42.409Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8571 |
vulnerable | 2026-06-08 05:27:16.854780 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.