{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Brocade SAN Navigator (SANnav) versions ant\u00e9rieures \u00e0 2.4.0 ",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2023-34455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34455"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-1016",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-11-25T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans NetApp Brocade SAN Navigator. Elle permet \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance.",
  "title": "Vuln\u00e9rabilit\u00e9 dans NetApp Brocade SAN Navigator",
  "vendor_advisories": [
    {
      "published_at": "2024-11-22",
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20230818-0009",
      "url": "https://security.netapp.com/advisory/ntap-20230818-0009/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "ONTAP Select Deploy administration utility versions ant\u00e9rieures \u00e0 9.14.1",
      "product": {
        "name": "ONTAP Select Deploy administration utility",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Active IQ Unified Manager pour Microsoft Windows versions ant\u00e9rieures \u00e0 9.12",
      "product": {
        "name": "Active IQ Unified Manager pour Microsoft Windows",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Active IQ Unified Manager pour VMware vSphere versions ant\u00e9rieures \u00e0 9.10",
      "product": {
        "name": "Active IQ Unified Manager pour VMware vSphere",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "NetApp Cloud Backup toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S et H410C toutes versions",
      "product": {
        "name": "NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-3631",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3631"
    },
    {
      "name": "CVE-2021-3520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3520"
    },
    {
      "name": "CVE-2021-4090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-4090"
    },
    {
      "name": "CVE-2021-3667",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3667"
    },
    {
      "name": "CVE-2021-3580",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3580"
    },
    {
      "name": "CVE-2022-26488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26488"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0380",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-05-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003eles produits NetApp\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0\nla confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits NetApp",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20220331-0005 du 09 mai 2024",
      "url": "https://security.netapp.com/advisory/ntap-20220331-0005/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20220331-0010 du 09 mai 2024",
      "url": "https://security.netapp.com/advisory/ntap-20220331-0010/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20220318-0010 du 09 mai 2024",
      "url": "https://security.netapp.com/advisory/ntap-20220318-0010/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20220419-0005 du 09 mai 2024",
      "url": "https://security.netapp.com/advisory/ntap-20220419-0005/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20211104-0006 du 09 mai 2024",
      "url": "https://security.netapp.com/advisory/ntap-20211104-0006/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20211104-0005 du 09 mai 2024",
      "url": "https://security.netapp.com/advisory/ntap-20211104-0005/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "NetApp ONTAP 9 versions ant\u00e9rieures \u00e0 9.12.1P10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "NetApp ONTAP 9 versions ant\u00e9rieures \u00e0 9.10.1P16",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "NetApp ONTAP 9 versions ant\u00e9rieures \u00e0 9.11.1P13",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "NetApp ONTAP 9 versions ant\u00e9rieures \u00e0 9.9.1P18",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "NetApp ONTAP 9 versions ant\u00e9rieures \u00e0 9.13.1P4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2024-21985",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21985"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0077",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-01-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans \u003cspan class=\"textit\"\u003eles\nproduits NetApp\u003c/span\u003e. Elle permet \u00e0 un attaquant de provoquer une\n\u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits NetApp",
  "vendor_advisories": [
    {
      "published_at": "2024-01-26",
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20240126-0001",
      "url": "https://security.netapp.com/advisory/ntap-20240126-0001/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Micrologiciel Brocade Fabric OS versions ant\u00e9rieures \u00e0 9.2.0a",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-3489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3489"
    }
  ],
  "links": [],
  "reference": "CERTFR-2023-AVI-0979",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-11-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans \u003cspan class=\"textit\"\u003eles\nproduits NetApp\u003c/span\u003e. Elle permet \u00e0 un attaquant de provoquer une\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits NetApp",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20231124-0003 du 24 novembre 2023",
      "url": "https://security.netapp.com/advisory/ntap-20231124-0003/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Active IQ Unified Manager pour VMware vSphere sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "Active IQ Unified Manager pour VMware vSphere",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Active IQ Unified Manager pour Microsoft Windows sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "Active IQ Unified Manager pour Microsoft Windows",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Active IQ Unified Manager pour Linux sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "Active IQ Unified Manager pour Linux",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Brocade SAN Navigator versions ant\u00e9rieures \u00e0 2.3.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-20862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-20862"
    },
    {
      "name": "CVE-2023-4863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4863"
    },
    {
      "name": "CVE-2016-1000027",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1000027"
    }
  ],
  "links": [],
  "reference": "CERTFR-2023-AVI-0908",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-11-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nNetApp. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service\n\u00e0 distance, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits NetApp",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20230929-0011 du 01 novembre 2023",
      "url": "https://security.netapp.com/advisory/ntap-20230929-0011/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20230420-0009 du 01 novembre 2023",
      "url": "https://security.netapp.com/advisory/ntap-20230420-0009/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20230526-0002 du 01 novembre 2023",
      "url": "https://security.netapp.com/advisory/ntap-20230526-0002/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Contr\u00f4leur de gestion de carte m\u00e8re (BMC) HCI H300S/H500S/H700S/H410S",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Contr\u00f4leur de gestion de carte m\u00e8re (BMC) HCI H410C",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-23003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-23003"
    }
  ],
  "links": [],
  "reference": "CERTFR-2023-AVI-0809",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-10-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits NetApp. Elle permet\n\u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte\n\u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n\nL\u0027\u00e9diteur indique ne pas avoir l\u0027intention de corriger cette\nvuln\u00e9rabilit\u00e9 sur les produits mentionn\u00e9s et ne propose pas de mesure de\ncontournement.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits NetApp",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp ntap-20230331-0003 du 04 octobre 2023",
      "url": "https://security.netapp.com/advisory/ntap-20230331-0003/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Produits NetApp incluant le microcode Brocade Fabric Operating System versions ant\u00e9rieures \u00e0 9.2.0, 9.1.1c et 8.2.3d",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-31432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31432"
    },
    {
      "name": "CVE-2023-31428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31428"
    },
    {
      "name": "CVE-2023-31928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31928"
    },
    {
      "name": "CVE-2023-31425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31425"
    },
    {
      "name": "CVE-2023-31430",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31430"
    },
    {
      "name": "CVE-2023-31429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31429"
    },
    {
      "name": "CVE-2023-31926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31926"
    },
    {
      "name": "CVE-2023-31927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31927"
    },
    {
      "name": "CVE-2023-31431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31431"
    },
    {
      "name": "CVE-2023-31426",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31426"
    },
    {
      "name": "CVE-2023-31427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31427"
    }
  ],
  "links": [],
  "reference": "CERTFR-2023-AVI-0727",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-09-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003eles produits NetApp\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es,\nune atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et un d\u00e9ni de service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits NetApp",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20230908-0007 du 08 septembre 2023",
      "url": "https://security.netapp.com/advisory/ntap-20230908-0007/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "ONTAP versions 9.10.x ant\u00e9rieures \u00e0 9.10.1P13",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "ONTAP versions 9.9.x ant\u00e9rieures \u00e0 9.9.1P16",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "ONTAP versions 9.12.x ant\u00e9rieures \u00e0 9.12.1P3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-27522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-27522"
    },
    {
      "name": "CVE-2023-25690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25690"
    }
  ],
  "links": [],
  "reference": "CERTFR-2023-AVI-0490",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-06-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans\u003cspan\nclass=\"textit\"\u003e NetApp ONTAP\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, un d\u00e9ni de\nservice \u00e0 distance et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans NetApp ONTAP",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20230316-0007 du 26 juin 2023",
      "url": "https://security.netapp.com/advisory/ntap-20230316-0007/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "FAS/AFF BIOS versions A300/8200/A200/2650/2620/C190/A220/2720/2750 sans le correctif de s\u00e9curit\u00e9 308-04120_A0_SERVICE_IMAGE_11.18_S.zip",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-33627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33627"
    }
  ],
  "links": [],
  "reference": "CERTFR-2023-AVI-0087",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-02-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits NetApp. Elle permet\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, un d\u00e9ni de\nservice et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits NetApp",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp ntap-20220222-0002 du 02 f\u00e9vrier 2023",
      "url": "https://security.netapp.com/advisory/ntap-20220222-0002/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "NetApp FAS/AFF BIOS version A900/9500 sans le dernier correctif",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Les versions de NetApp Cloud Insights Telegraf Agent sans le correctif du 11/11/2022",
      "product": {
        "name": "Cloud Insights Telegraf Agent",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-33117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33117"
    },
    {
      "name": "CVE-2022-28131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28131"
    }
  ],
  "links": [],
  "reference": "CERTFR-2023-AVI-0030",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-01-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes les produits NetApp.\nElles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0\ndistance, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s les produits NetApp",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp ntap-20220818-0001 du 13 janvier 2023",
      "url": "https://security.netapp.com/advisory/ntap-20220818-0001/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp ntap-20221111-0009 du 13 janvier 2023",
      "url": "https://security.netapp.com/advisory/ntap-20221111-0009/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour la liste des syst\u00e8mes affect\u00e9s (cf. section Documentation)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-33980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33980"
    }
  ],
  "links": [],
  "reference": "CERTFR-2022-AVI-969",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-10-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits NetApp. Elle permet\n\u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte\n\u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits NetApp",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp ntap-20221028-0015 du 28 octobre 2022",
      "url": "https://security.netapp.com/advisory/ntap-20221028-0015/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Management Services for Element Software and NetApp HCI avec une version de Redis ant\u00e9rieure \u00e0 5.0.14, 6.0.16, 6.2.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-32762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-32762"
    },
    {
      "name": "CVE-2021-32628",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-32628"
    },
    {
      "name": "CVE-2021-32687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-32687"
    },
    {
      "name": "CVE-2021-32627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-32627"
    },
    {
      "name": "CVE-2021-32672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-32672"
    },
    {
      "name": "CVE-2021-32675",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-32675"
    },
    {
      "name": "CVE-2021-32765",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-32765"
    },
    {
      "name": "CVE-2021-32626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-32626"
    },
    {
      "name": "CVE-2021-41099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41099"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-848",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-11-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nNetApp. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service,\nune atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits NetApp",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp ntap-20211104-0003 du 4 novembre 2021",
      "url": "https://security.netapp.com/advisory/ntap-20211104-0003/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "System Manager versions 9.x ant\u00e9rieures \u00e0 9.7P16, 9.8P7 et 9.9.1P2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-27004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27004"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-842",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-11-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits NetApp. Elle permet\n\u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits NetApp",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp ntap-20211029-0001 du 29 octobre 2021",
      "url": "https://security.netapp.com/advisory/ntap-20211029-0001/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "NetApp HCI Baseboard Management Controller (BMC) H300S/H500S/H700S/H300E/H500E/H700E/H410S",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Clustered Data ONTAP versions 9.6.x ant\u00e9rieures \u00e0 9.6P16",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "System Manager versions 9.9.x ant\u00e9rieures \u00e0 9.9.1P2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Clustered Data ONTAP versions 9.8.x ant\u00e9rieures \u00e0 9.8P7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Clustered Data ONTAP versions 9.7.x ant\u00e9rieures \u00e0 9.7P16",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "NetApp HCI Baseboard Management Controller (BMC) H410C",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "NetApp SolidFire \u0026 HCI Management Node",
      "product": {
        "name": "NetApp SolidFire \u0026 HCI Management Node",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "System Manager versions 9.7.x ant\u00e9rieures \u00e0 9.7P16",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Clustered Data ONTAP versions 9.9.x ant\u00e9rieures \u00e0 9.9.1P3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "System Manager versions 9.8.x ant\u00e9rieures \u00e0 9.8P7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-41864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41864"
    },
    {
      "name": "CVE-2021-27004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27004"
    },
    {
      "name": "CVE-2021-27005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27005"
    },
    {
      "name": "CVE-2021-22947",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22947"
    },
    {
      "name": "CVE-2021-22946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22946"
    },
    {
      "name": "CVE-2021-22945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22945"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-834",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-10-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nNetApp. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service\n\u00e0 distance, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits NetApp",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp ntap-20211029-0004 du 29 octobre 2021",
      "url": "https://security.netapp.com/advisory/ntap-20211029-0004/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp ntap-20211029-0001 du 29 octobre 2021",
      "url": "https://security.netapp.com/advisory/ntap-20211029-0001/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp ntap-20211029-0003 du 29 octobre 2021",
      "url": "https://security.netapp.com/advisory/ntap-20211029-0003/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp ntap-20211029-0002 du 29 octobre 2021",
      "url": "https://security.netapp.com/advisory/ntap-20211029-0002/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Clustered Data ONTAP versions 9.6.x ant\u00e9rieures \u00e0 9.6P16",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Clustered Data ONTAP versions 9.5.x ant\u00e9rieures \u00e0 9.5P18",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Clustered Data ONTAP versions 9.8.x ant\u00e9rieures \u00e0 9.8P7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Clustered Data ONTAP versions 9.7.x ant\u00e9rieures \u00e0 9.7P16",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Clustered Data ONTAP versions 9.9.x ant\u00e9rieures \u00e0 9.9.1P2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-27001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27001"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-795",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-10-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans NetApp Clustered Data ONTAP.\nElle permet \u00e0 un attaquant de provoquer une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans NetApp Clustered Data ONTAP",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp ntap-20211018-0001 du 18 octobre 2021",
      "url": "https://security.netapp.com/advisory/ntap-20211018-0001/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Clustered Data ONTAP versions 9.5.x ant\u00e9rieures \u00e0 9.5P18",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Clustered Data ONTAP versions 9.7.x ant\u00e9rieures \u00e0 9.7P14",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Clustered Data ONTAP versions 9.8.x ant\u00e9rieures \u00e0 9.8P5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Cloud Manager versions ant\u00e9rieures \u00e0 3.9.10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Clustered Data ONTAP versions 9.9.x ant\u00e9rieures \u00e0 9.9.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Clustered Data ONTAP versions 9.6.x ant\u00e9rieures \u00e0 9.6P15",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-27003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27003"
    },
    {
      "name": "CVE-2021-27002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27002"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-771",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-10-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nNetApp. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0\nl\u0027int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits NetApp",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp ntap-20211012-0001 du 12 octobre 2021",
      "url": "https://security.netapp.com/advisory/ntap-20211012-0001/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp ntap-20211011-0001 du 11 octobre 2021",
      "url": "https://security.netapp.com/advisory/ntap-20211011-0001/"
    }
  ]
}