Skip to content
OpenAdvisories
Medium WID-SEC-2025-2037 4 CVEs

NetApp StorageGRID: Mehrere Schwachstellen

Published Sep 10, 2025 · Updated Sep 21, 2025 · Revision 2 · de-DE

Vendor: NETAPP Product: StorageGRID

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in NetApp StorageGRID ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen und sich erhöhte Berechtigungen zu verschaffen.

Product

NetApp StorageGRID ist eine softwaredefinierte, objektbasierte Speicherlösung.

Vulnerabilities 4

  • High 7.5
    CVE-2025-26515

    CVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 without Single Sign-on enabled are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an unauthenticated attacker to change the…

    NETAPP StorageGRID
  • Medium 6.4
    CVE-2025-26514

    CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Reflected Cross-Site Scripting vulnerability. Successful exploit could allow an attacker to view or modify configuration settings or add or modify user a…

    NETAPP StorageGRID
  • Medium 5.4
    CVE-2025-26517

    CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege escalation vulnerability. Successful exploit could allow an unauthorized authenticated attacker to discover Grid node names and IP addresses or…

    NETAPP StorageGRID
  • Medium 5.3
    CVE-2025-26516

    CVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Denial of Service vulnerability. Successful exploit could allow an unauthenticated attacker to cause a Denial of Service on the Admin node.

    NETAPP StorageGRID

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-30270, EUVD-2025-30271, EUVD-2025-30275, EUVD-2025-30268

  2. #1

    Initiale Fassung

References