Skip to content
OpenAdvisories
Medium WID-SEC-2025-2611 1 CVE

NetApp ActiveIQ Unified Manager (Axios): Schwachstelle ermöglicht Offenlegung von Informationen

Published Nov 16, 2025 · Updated Nov 16, 2025 · de-DE

Vendor: NETAPP Product: ActiveIQ Unified Manager Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager ausnutzen, um Informationen offenzulegen.

Product

ActiveIQ Unified Manager ist eine Managementlösung für NetApp Storage Produkte.

Vulnerabilities 1

  • High 7.7
    CVE-2025-27152 Public exploit

    Possible SSRF and Credential Leakage via Absolute URL in axios Requests

    axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if ⁠baseURL is set, axios sends the request to the specified absolute URL, potentially causing SSRF…

    axios axios prism kubeflow-pipelines-apiserver Debian Ubuntu Wolfi npm

Revision history

  1. #1

    Initiale Fassung

References