CVE-2021-26997

MEDIUM

E-Series SANtricity OS Controller 11.0.0-11.70.0 - Information Disclosure via Error Message

Title source: llm
STIX 2.1

Description

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover information via error messaging which may aid in crafting more complex attacks.

References (1)

Core 1
Core References

Scores

CVSS v3 6.5
EPSS 0.0044
EPSS Percentile 63.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-209
Status published
Products (1)
netapp/e-series_santricity_os_controller 11.0.0 - 11.70.1
Published Jun 11, 2021
Tracked Since Feb 18, 2026