# Netapp Active Iq Unified Manager


- [CVE-2021-44228](https://insights.sbomify.com/CVE-2021-44228/): Apache Log4j2 Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2023-41993](https://insights.sbomify.com/CVE-2023-41993/): Apple Multiple Products WebKit Code Execution (high 8.8, exploited in the wild)
- [CVE-2023-4863](https://insights.sbomify.com/CVE-2023-4863/): Google Chromium WebP Heap-Based Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2018-11776](https://insights.sbomify.com/CVE-2018-11776/): Apache Struts Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2017-12617](https://insights.sbomify.com/CVE-2017-12617/): Apache Tomcat Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2021-3156](https://insights.sbomify.com/CVE-2021-3156/): Sudo Heap-Based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2019-13272](https://insights.sbomify.com/CVE-2019-13272/): Linux Kernel Improper Privilege Management (high 7.8, exploited in the wild)
- [CVE-2025-0411](https://insights.sbomify.com/CVE-2025-0411/): 7-Zip Mark of the Web Bypass (high 7.0, exploited in the wild)
- [CVE-2020-11023](https://insights.sbomify.com/CVE-2020-11023/): JQuery Cross-Site Scripting (XSS) (medium 6.9, exploited in the wild)
- [CVE-2024-52533](https://insights.sbomify.com/CVE-2024-52533/): Memory corruption in n/a (critical 9.8)
- [CVE-2021-32292](https://insights.sbomify.com/CVE-2021-32292/): Memory corruption in n/a (critical 9.8)
- [CVE-2023-27533](https://insights.sbomify.com/CVE-2023-27533/): Command injection in https://github.com/curl/curl (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/netapp/active-iq-unified-manager/