Vulnerabilities > Netapp > Snap Creator Framework > Low

DATE CVE VULNERABILITY TITLE RISK
2021-06-22 CVE-2021-34428 Insufficient Session Expiration vulnerability in multiple products
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager.
3.5
2020-02-11 CVE-2016-5710 Improper Restriction of Rendered UI Layers or Frames vulnerability in Netapp Snap Creator Framework
NetApp Snap Creator Framework before 4.3P1 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors.
network
netapp CWE-1021
3.5