GCVE - cpe:2.3:o:netapp:clustered_data_ontap:9.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:netapp:clustered_data_ontap:9.0:*:*:*:*:*:*:*

part: o version: 9.0 update: *

Vendor	Netapp (`f19678f6-cb27-5a55-8852-34b249f80ef9`)
Product	Clustered Data Ontap (`c3ce49c8-abe2-55c7-b870-90caccbab75a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-38477`	vulnerable	2026-06-08 06:41:47.234048	Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue. Published: 2024-07-01T18:16:11.935Z Updated: 2025-11-03T21:55:44.577Z Open on db.gcve.eu Reference links https://httpd.apache.org/security/vulnerabilities_24.html https://security.netapp.com/advisory/ntap-20240712-0001/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-38476`	vulnerable	2026-06-08 06:41:47.233611	Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Users are recommended to upgrade to version 2.4.60, which fixes this issue. Published: 2024-07-01T18:15:40.071Z Updated: 2025-11-03T21:55:42.872Z Open on db.gcve.eu Reference links https://httpd.apache.org/security/vulnerabilities_24.html https://security.netapp.com/advisory/ntap-20240712-0001/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-38474`	vulnerable	2026-06-08 06:41:47.220190	Apache HTTP Server weakness with encoded question marks in backreferences Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI. Users are recommended to upgrade to version 2.4.60, which fixes this issue. Some RewriteRules that capture and substitute unsafely will now fail unless rewrite flag "UnsafeAllow3F" is specified. Published: 2024-07-01T18:14:47.004Z Updated: 2025-03-25T18:24:03.613Z Open on db.gcve.eu Reference links https://httpd.apache.org/security/vulnerabilities_24.html https://security.netapp.com/advisory/ntap-20240712-0001/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-38403`	vulnerable	2026-06-08 06:08:17.824783	Details available iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. Published: 2023-07-17T00:00:00.000Z Updated: 2024-11-27T14:33:27.522Z Open on db.gcve.eu Reference links https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc https://github.com/esnet/iperf/commit/0ef151550d96cc4460f98832df84b4a1e87c65e9 https://bugs.debian.org/1040830 https://github.com/esnet/iperf/issues/1542 https://cwe.mitre.org/data/definitions/130.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5490`	not_vulnerable	2026-06-08 05:13:59.360950	Details available Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixed version of Service Processor firmware IMMEDIATELY. Published: 2019-03-21T18:25:53.000Z Updated: 2024-08-04T19:54:53.575Z Open on db.gcve.eu Reference links https://security.netapp.com/advisory/ntap-20190305-0001/ http://support.lenovo.com/us/en/solutions/LEN-26771	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.