What’s Vulnerable › Vulnerabilities

CVE-2018-5495

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-11-14 · updated 2026-06-17

Description

All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with systems on the same network as the StorageGRID Webscale Admin Node via HTTP or to take over services on the Admin Node.

Affected products

• NetApp StorageGRID Webscale: all versions

References

• https://security.netapp.com/advisory/ntap-20181114-0001/
• https://security.netapp.com/advisory/ntap-20181114-0001/

Get alerted when CVE-2018-5495 or the next vulnerability affects your stack