CVE-2021-26987

CRÍTICO 9.8CVE-2021-26987 · Published 15/03/2021 · updated 17/06/2026

Em resumo

CVE-2021-26987 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta management services for element software and netapp hci (netapp), solidfire & hci management node (netapp), spring boot (vmware).
Chance de exploração nos próximos 30 dias (EPSS): 2.4%, maior que 84.3% das vulnerabilidades.
Correção: atualize para 2.17.56, 1.3.2 ou posterior.

Package	Affected versions	Patched versions
management services for element software and netapp hci netapp	`< 2.17.56`	`2.17.56`
solidfire & hci management node netapp	`≤ 12.2`	No fix yet
spring boot vmware	`< 1.3.2`	`1.3.2`

Description

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Management Services versions prior to 2.17.56 and Management Node versions through 12.2 contain vulnerable versions of SpringBoot Framework.

References

security.netapp.com/advisory/ntap-20210315-0001 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free