CVE Feed

    Dashboard / CVE / CVE-2016-5372

    CVE-2016-5372

    Cross-site request forgery (CSRF) vulnerability in NetApp Snap Creator Framework before 4.3.0P1 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.

    Published:Feb 7, 2017
    Last Modified:Apr 20, 2025
    EPS:Feb 7, 2017
    EPSS Score:0.00089
    CVSS Score:6.3

    Affected Products

    Vendor
    Netapp
    Product
    Snap Creator Framework

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-22968 (CVSS 5.3) — In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for …
    CVE-2021-42550 (CVSS 6.6) — In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations f…
    CVE-2021-22096 (CVSS 4.3) — In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible fo…
    CVE-2021-34429 (CVSS 5.3) — For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encode…
    CVE-2021-34428 (CVSS 2.9) — For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener…
    CVE-2021-28169 (CVSS 5.3) — For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet w…
    CVE-2020-27223 (CVSS 5.2) — In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a requ…
    CVE-2021-23901 (CVSS 9.1) — An XML external entity (XXE) injection vulnerability was discovered in the Nutch DmozParser and is known to af…
    CVE-2021-23926 (CVSS 9.1) — The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user fro…
    CVE-2020-27218 (CVSS 4.8) — In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High