Netapp Storagegrid Webscale vulnerabilities

6 CVEs affecting Netapp Storagegrid Webscale, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-5495, published 2018-11-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-8610, published 2017-11-13. High severity, CVSS 7.5. EPSS: 39.7% chance of exploitation in the next 30 days. A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote…
CVE-2018-18065, published 2018-10-08. Medium severity, CVSS 6.5. EPSS: 17.5% chance of exploitation in the next 30 days. _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted…
CVE-2016-10708, published 2018-01-21. High severity, CVSS 7.5. EPSS: 15.7% chance of exploitation in the next 30 days. sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz,…
CVE-2018-18066, published 2018-10-08. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted…
CVE-2017-12422, published 2017-08-29. Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days. NetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10.4.0.2 allow remote authenticated users to delete arbitrary objects via unspecified vectors.
CVE-2018-5495, published 2018-11-14. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with systems on the same network as the StorageGRID Webscale Admin…