Active Iq Unified Manager vulnerabilitiesAnd the versions its exploited flaws hit.
Active Iq Unified Manager is made by Netapp. We track 827 published vulnerabilities listed under that exact name, across 5 versions. 9 of them are on the list of flaws known to be exploited, the newest added on 6 February 2025. Netapp lists newer releases under their own names, such as Active Iq Unified Manager for Vmware Vsphere, so check those pages too.
The most recent Active Iq Unified Manager flaw added to the known-exploited list is CVE-2025-0411, on 6 February 2025. We keep watching the known-exploited list.
Is Active Iq Unified Manager listed under other names? Yes.
Netapp also lists Active Iq Unified Manager under more specific names, such as Active Iq Unified Manager for Vmware Vsphere. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
Which versions of Active Iq Unified Manager do the exploited flaws hit?
Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.
- CVE-2017-12617Exploited list, 25 Mar 2022
Apache Tomcat Remote Code Execution Vulnerability
7.3 and later9.5 and later - CVE-2018-11776Exploited list, 3 Nov 2021
Apache Struts Remote Code Execution Vulnerability
7.3 and later9.5 and later
7 more exploited flaws name Active Iq Unified Manager without a version of its own, for example as the system other affected software runs on. They are in the list below.
Which Active Iq Unified Manager vulnerabilities are being exploited?
9 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.07-Zip Mark of the Web Bypass Vulnerability
7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user.
- 6.9JQuery Cross-Site Scripting (XSS) Vulnerability
JQuery contains a persistent cross-site scripting (XSS) vulnerability.
- 8.8Apple Multiple Products WebKit Code Execution Vulnerability
Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content.
- 8.8Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page.
- 7.8Sudo Heap-Based Buffer Overflow Vulnerability
Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.
- 8.1Apache Tomcat Remote Code Execution Vulnerability
When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request.
- 10.0Apache Log4j2 Remote Code Execution Vulnerability
Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.
- 7.8Linux Kernel Improper Privilege Management Vulnerability
Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.
Which Active Iq Unified Manager flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used...
- >99%
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g.
- >99%
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
- >99%CVE-2024-6387High
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).
- >99%
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single...
- 88%CVE-2021-3711Critical
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt().
- 84%
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.
- 83%CVE-2021-25216Critical
In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of the BIND 9.17...
- 83%CVE-2022-1292High
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection.
Running Active Iq Unified Manager? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user.
- Matched to
- Active Iq Unified Manager on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 827 published vulnerabilities listed under the name Active Iq Unified Manager, across 5 versions. The most recent Active Iq Unified Manager flaw added to the known-exploited list is CVE-2025-0411, on 6 February 2025.
9 are on the list of flaws known to be exploited. The most recently added are CVE-2025-0411, CVE-2020-11023 and CVE-2023-41993.
Netapp also lists Active Iq Unified Manager under more specific names, such as Active Iq Unified Manager for Vmware Vsphere. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Each flaw names its own versions, usually as ranges. The newest, CVE-2017-12617, affects 7.3 and later, 9.5 and later. The versions for every exploited flaw are listed on this page.
Create a EdgeProtect account and track Active Iq Unified Manager. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.