Netapp Storagegrid Webscale NAS Bridge vulnerabilities

2 CVEs affecting Netapp Storagegrid Webscale NAS Bridge, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-19039, published 2018-12-13.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-19039, published 2018-12-13. Medium severity, CVSS 6.5. EPSS: 7.3% chance of exploitation in the next 30 days. Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.
• CVE-2018-12099, published 2018-06-11. Medium severity, CVSS 6.1. EPSS: 2.1% chance of exploitation in the next 30 days. Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links.