# Netapp Snapcenter


- [CVE-2021-44228](https://insights.sbomify.com/CVE-2021-44228/): Apache Log4j2 Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2018-11776](https://insights.sbomify.com/CVE-2018-11776/): Apache Struts Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2017-12617](https://insights.sbomify.com/CVE-2017-12617/): Apache Tomcat Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2025-26512](https://insights.sbomify.com/CVE-2025-26512/): CVE-2025-26512 Privilege Escalation Vulnerability in SnapCenter (critical 9.9)
- [CVE-2023-1096](https://insights.sbomify.com/CVE-2023-1096/): Auth bypass in SnapCenter (critical 9.8)
- [CVE-2022-33980](https://insights.sbomify.com/CVE-2022-33980/): Apache Commons Configuration insecure interpolation defaults (critical 9.8)
- [CVE-2022-2274](https://insights.sbomify.com/CVE-2022-2274/): RSA implementation bug in AVX512IFMA instructions (critical 9.8)
- [CVE-2022-1292](https://insights.sbomify.com/CVE-2022-1292/): The c_rehash script allows command injection (critical 9.8)
- [CVE-2021-3711](https://insights.sbomify.com/CVE-2021-3711/): SM2 Decryption Buffer Overflow (critical 9.8)
- [CVE-2021-22931](https://insights.sbomify.com/CVE-2021-22931/): Code injection in Node (critical 9.8)
- [CVE-2018-1285](https://insights.sbomify.com/CVE-2018-1285/): XML External Entity attack in log4net (critical 9.8)
- [CVE-2020-10683](https://insights.sbomify.com/CVE-2020-10683/): dom4j allows External Entities by default which might enable XXE attacks (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/netapp/snapcenter/