Approved changes feed: RSS · Atom

cpe:2.3:a:netapp:cloud_manager:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorNetapp (f19678f6-cb27-5a55-8852-34b249f80ef9)
ProductCloud Manager (23a45021-5289-5e0a-9a72-4f9fbc52fb57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-45105 vulnerable 2026-06-08 05:36:47.830872 Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.
Published: 2021-12-18T11:55:08.000Z
Updated: 2026-05-29T11:45:26.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44228 vulnerable 2026-06-08 05:36:45.263961 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.
Published: 2021-12-10T00:00:00.000Z
Updated: 2025-10-21T23:25:23.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42550 vulnerable 2026-06-08 05:35:22.323258 RCE from attacker with configuration edit priviledges through JNDI lookup
MEDIUM (6.6)
In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.
Published: 2021-12-16T00:00:00.000Z
Updated: 2024-08-04T03:38:49.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31808 vulnerable 2026-06-08 05:31:53.944136 Details available
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug, it is vulnerable to a Denial of Service attack (against all clients using the proxy). A client sends an HTTP Range request to trigger this.
Published: 2021-05-27T00:00:00.000Z
Updated: 2024-08-03T23:10:30.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31807 vulnerable 2026-06-08 05:31:53.943525 Details available
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service when delivering responses to HTTP Range requests. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent.
Published: 2021-06-08T00:00:00.000Z
Updated: 2024-08-03T23:10:30.180Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31806 vulnerable 2026-06-08 05:31:53.926817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28651 vulnerable 2026-06-08 05:31:24.687716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28164 vulnerable 2026-06-08 05:31:23.069995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28163 vulnerable 2026-06-08 05:31:23.044119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23337 vulnerable 2026-06-08 05:30:02.726924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25097 vulnerable 2026-06-08 05:22:35.994914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14058 vulnerable 2026-06-08 05:18:01.971455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.