Skip to content
OpenAdvisories
Medium WID-SEC-2025-1142 1 CVE

NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Offenlegung von Informationen, Manipulation von Dateien, und Denial of Service.

Published May 25, 2025 · Updated May 25, 2025 · de-DE

Vendor: NETAPP Product: ActiveIQ Unified Manager Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager ausnutzen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Denial of Service Angriff durchzuführen.

Product

ActiveIQ Unified Manager ist eine Managementlösung für NetApp Storage Produkte.

Vulnerabilities 1

  • Medium 5.3
    CVE-2025-31672

    Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names

    Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names (inc…

    Apache Software Foundation Apache POI opensearch-2 libapache-poi-java Debian Ubuntu Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References