# Netapp Snapmanager


- [CVE-2021-39144](https://insights.sbomify.com/CVE-2021-39144/): XStream Remote Code Execution (high 8.5, exploited in the wild)
- [CVE-2022-2068](https://insights.sbomify.com/CVE-2022-2068/): The c_rehash script allows command injection (critical 9.8)
- [CVE-2022-1292](https://insights.sbomify.com/CVE-2022-1292/): The c_rehash script allows command injection (critical 9.8)
- [CVE-2022-23305](https://insights.sbomify.com/CVE-2022-23305/): SQL injection in JDBC Appender in Apache Log4j V1 (critical 9.8)
- [CVE-2020-10683](https://insights.sbomify.com/CVE-2020-10683/): dom4j allows External Entities by default which might enable XXE attacks (critical 9.8)
- [CVE-2019-11068](https://insights.sbomify.com/CVE-2019-11068/): Nokogiri vulnerable to libxslt protection mechanism bypass (critical 9.8)
- [CVE-2017-7657](https://insights.sbomify.com/CVE-2017-7657/): Critical severity vulnerability that affects org.eclipse.jetty:jetty-server (critical 9.8)
- [CVE-2017-7658](https://insights.sbomify.com/CVE-2017-7658/): Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling) (critical 9.8)
- [CVE-2016-9841](https://insights.sbomify.com/CVE-2016-9841/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-10285](https://insights.sbomify.com/CVE-2017-10285/): Code injection in Java (critical 9.6)
- [CVE-2017-10346](https://insights.sbomify.com/CVE-2017-10346/): Code injection in Java (critical 9.6)
- [CVE-2017-10086](https://insights.sbomify.com/CVE-2017-10086/): Code injection in Java (critical 9.6)

---
From sbomify Insights: https://insights.sbomify.com/products/netapp/snapmanager/