# Netapp Storagegrid


- [CVE-2016-3427](https://insights.sbomify.com/CVE-2016-3427/): Oracle Java SE and JRockit Unspecified (critical 9.8, exploited in the wild)
- [CVE-2021-40438](https://insights.sbomify.com/CVE-2021-40438/): Apache HTTP Server-Side Request Forgery (SSRF) (critical 9.0, exploited in the wild)
- [CVE-2022-37434](https://insights.sbomify.com/CVE-2022-37434/): Memory corruption in n/a (critical 9.8)
- [CVE-2021-39275](https://insights.sbomify.com/CVE-2021-39275/): ap_escape_quotes buffer overflow (critical 9.8)
- [CVE-2018-1312](https://insights.sbomify.com/CVE-2018-1312/): Security feature bypass in Apache HTTP Server (critical 9.8)
- [CVE-2017-3167](https://insights.sbomify.com/CVE-2017-3167/): Auth bypass in Apache HTTP Server (critical 9.8)
- [CVE-2025-25291](https://insights.sbomify.com/CVE-2025-25291/): ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential) (critical 9.3)
- [CVE-2025-25292](https://insights.sbomify.com/CVE-2025-25292/): Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential) (critical 9.3)
- [CVE-2022-23806](https://insights.sbomify.com/CVE-2022-23806/): Other in n/a (critical 9.1)
- [CVE-2020-14583](https://insights.sbomify.com/CVE-2020-14583/): Other in Java (high 8.3)
- [CVE-2020-14664](https://insights.sbomify.com/CVE-2020-14664/): Code injection in Java (high 8.3)
- [CVE-2020-2803](https://insights.sbomify.com/CVE-2020-2803/): Other in Java (high 8.3)

---
From sbomify Insights: https://insights.sbomify.com/products/netapp/storagegrid/