Vulnerabilities > Netapp > Snapcenter Server > 2.0

DATE CVE VULNERABILITY TITLE RISK
2019-03-04 CVE-2018-5482 Missing Encryption of Sensitive Data vulnerability in Netapp Snapcenter Server
NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.
network
low complexity
netapp CWE-311
5.3
2019-03-04 CVE-2017-15515 Cross-site Scripting vulnerability in Netapp Snapcenter Server
NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field.
network
low complexity
netapp CWE-79
4.8
2018-03-06 CVE-2017-15519 Improper Authentication vulnerability in Netapp Snapcenter Server 2.0/3.0/3.0.1
Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services.
network
low complexity
netapp CWE-287
7.2
2017-11-16 CVE-2017-15516 Cross-Site Request Forgery (CSRF) vulnerability in Netapp Snapcenter Server 1.1/2.0
NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an unintended authenticated action in the user interface.
network
low complexity
netapp CWE-352
8.8