Netapp Solidfire & Hci Management Node vulnerabilities

103 CVEs affecting Netapp Solidfire & Hci Management Node, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-24928, published 2025-02-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability, published 2022-03-03. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-06-02. EPSS: 5.5% chance of exploitation in the next 30 days. A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1…
CVE-2022-1292, published 2022-05-03. High severity, CVSS 7.3. EPSS: 82.6% chance of exploitation in the next 30 days. The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed.…
CVE-2022-21449, published 2022-04-19. High severity, CVSS 7.5. EPSS: 77.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle…
CVE-2021-22901, published 2021-06-11. High severity, CVSS 8.1. EPSS: 63.5% chance of exploitation in the next 30 days. curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use…
CVE-2023-5178, published 2023-11-01. High severity, CVSS 8.8. EPSS: 9.6% chance of exploitation in the next 30 days. A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious…
CVE-2022-36946, published 2022-07-27. High severity, CVSS 7.5. EPSS: 8.9% chance of exploitation in the next 30 days. nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a…
CVE-2021-20322, published 2022-02-18. High severity, CVSS 7.4. EPSS: 6.9% chance of exploitation in the next 30 days. A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw…
CVE-2021-22924, published 2021-08-05. Low severity, CVSS 3.7. EPSS: 6.3% chance of exploitation in the next 30 days. libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take…
CVE-2021-25217, published 2021-05-26. High severity, CVSS 7.4. EPSS: 6.1% chance of exploitation in the next 30 days. In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life…
CVE-2019-19052, published 2019-11-18. High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days. A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering…

Latest

CVE-2025-24928, published 2025-02-18. High severity, CVSS 7.7. EPSS: 0.4% chance of exploitation in the next 30 days. libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted…
CVE-2024-56171, published 2025-02-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be…
CVE-2025-0725, published 2025-02-05. High severity, CVSS 7.3. EPSS: 1.8% chance of exploitation in the next 30 days. When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled…
CVE-2025-0167, published 2025-02-05. Low severity, CVSS 3.4. EPSS: 0.7% chance of exploitation in the next 30 days. When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This…
CVE-2024-40896, published 2024-12-23. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by…
CVE-2024-50602, published 2024-10-27. Medium severity, CVSS 5.9. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.
CVE-2024-36958, published 2024-05-30. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix nfsd4_encode_fattr4() crasher Ensure that args.acl is initialized early. It is used in an unconditional call to kfree()…
CVE-2024-33602, published 2024-05-06. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callback does not store all strings in the…
CVE-2023-38431, published 2023-07-18. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's length field and the SMB header sizes,…