Approved changes feed: RSS · Atom

cpe:2.3:a:netapp:storagegrid_(formerly_storagegrid_webscale):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetapp (f19678f6-cb27-5a55-8852-34b249f80ef9)
ProductStoragegrid (Formerly Storagegrid Webscale) (6e287ee5-bf71-5619-88ee-116cff34ddf5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-22051 vulnerable 2026-06-08 07:49:17.635318 Details available
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an authenticated attacker with low privileges to run arbitrary metrics queries, revealing metric results that they do not have access to.
Published: 2026-04-20T21:27:36.822Z
Updated: 2026-04-21T13:40:46.948Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22048 vulnerable 2026-06-08 07:49:17.625371 Details available
HIGH (7.1)
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources.
Published: 2026-02-17T23:01:30.331Z
Updated: 2026-02-18T13:44:08.177Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21988 vulnerable 2026-06-08 06:29:33.223364 CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale)
MEDIUM (5.3)
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive information via complex MiTM attacks due to a vulnerability in the SSH cryptographic implementation.
Published: 2024-06-14T21:37:46.450Z
Updated: 2024-11-12T20:02:20.694Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27318 vulnerable 2026-06-08 05:57:40.858330 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)
MEDIUM (6.5)
StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.13 are susceptible to a Denial of Service (DoS) vulnerability. A successful exploit could lead to a crash of the Local Distribution Router (LDR) service.
Published: 2024-02-05T20:35:27.521Z
Updated: 2024-08-02T12:09:42.409Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8571 vulnerable 2026-06-08 05:27:16.854780 Details available
StorageGRID (formerly StorageGRID Webscale) versions 10.0.0 through 11.3 prior to 11.2.0.8 and 11.3.0.4 are susceptible to a vulnerability which allows an unauthenticated remote attacker to cause a Denial of Service (DoS).
Published: 2020-03-13T15:10:08.000Z
Updated: 2024-08-04T10:03:46.377Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.