3.0.1

DATE	CVE	VULNERABILITY TITLE	RISK
2019-03-04	CVE-2018-5482	Missing Encryption of Sensitive Data vulnerability in Netapp Snapcenter Server NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel. network low complexity netapp CWE-311	5.3
2019-03-04	CVE-2017-15515	Cross-site Scripting vulnerability in Netapp Snapcenter Server NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field. network low complexity netapp CWE-79	4.8
2018-03-06	CVE-2017-15519	Improper Authentication vulnerability in Netapp Snapcenter Server 2.0/3.0/3.0.1 Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services. network low complexity netapp CWE-287	7.2