Skip to content
VulniPulse
Sign in
Highest advisory severityCritical 2 vendors · 2 advisories

CVE-2025-22871

CVE-2025-22871: 2 tracked advisory records across NetApp, Veeam. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

NetApp

1 advisory
  • Advisory severityHigh8.6

    High [CVE-2025-22871] Golang Vulnerability in NetApp Products

    NTAP-20250530-0004Source published Source updated

    Multiple NetApp products incorporate Golang. Golang versions prior to 1.23.8 and 1.24.0-0 prior to 1.24.2 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data. Successful exploitation of this vulnerability could lead to addition or modification of data. Affected products: Astra Control Center, Astra Control Center - NetApp Kubernetes Monitoring Operator, Astra Control Provisioner, Data Infrastructure Insights Telegraf Agent, NetApp Console Agent, NetApp Kubernetes Monitoring Operator, ONTAP tools for VMware vSphere 10. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.

    Affected products in this advisory
    • Astra Control Center - NetApp Kubernetes Monitoring Operator
    • Astra Control Provisioner
    • Data Infrastructure Insights Telegraf Agent
    • NetApp Console Agent

    1 more entries in the full advisory.

    Source-reported affected versions
    • 1.23.8
    • 1.24.0-0
    • 1.24.2
    Source-reported fixed versions
    • Astra Control Provisioner: 24.06
    • Astra Control Provisioner: 06.1
    • ONTAP tools for VMware vSphere 10: 10.5P2
    Mitigation guidance
    • Update affected NetApp products to a fixed release: Astra Control Provisioner: 24.06, Astra Control Provisioner: 06.1, ONTAP tools for VMware vSphere 10: 10.5P2.
    • Astra Control Center has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
    • Astra Control Center - NetApp Kubernetes Monitoring Operator has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
    • Astra Control Provisioner: Fixed in Astra Control Provisioner 24.06.

    2 more entries in the full advisory.

    Full advisory and evidenceOpen source bulletin

Veeam

1 advisory
  • Advisory severityCritical

    Critical [CVE-2020-14040 +67] List of Security Fixes and Improvements in Veeam Kasten for Kubernetes

    KB4825Source published

    This bulletin covers 68 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.

    List of Security Fixes and Improvements in Veeam Kasten for Kubernetes KB ID: 4825 Product: Kasten K10 by Veeam | 3 | 5 | 5.5 | 6 | 6.5 Published: 2026-03-02 Last Modified: Purpose This article aims to provide our customers' security and compliance teams with detailed information on security improvements. - Veeam Kasten for Kubernetes — Release Notes - Also resolves 8 Medium severity CVEs in the same and other packages. - Upgraded to latest UBI base image to resolve multiple CVEs in base OS packages. - Updated the Go runtime to resolve additional upstream Go CVEs. - Updated the bundled Prometheus Helm chart to resolve security issues. - Upgraded the Prometheus base image to resolve GHSA-hrxh-6v49-42gf - GitHub Advisory - Upgraded Dex image dependencies to resolve multiple Critical and…

    Related products — impact not confirmed
    No product details extracted. Check the source bulletin.
    Source-reported affected versions
    Affected-version details not available in this record.
    Source-reported fixed versions
    • 8.5.10
    • 8.5.5
    • 1.26.1
    • 8.5.3

    20 more entries in the full advisory.

    Mitigation guidance
    • List of Security Fixes and Improvements in Veeam Kasten for Kubernetes KB ID: 4825 Product: Veeam Kasten for Kubernetes | 7 | 7.5 | 8 | 8.5 | 9 Kasten K10 by Veeam | 3 | 5 | 5.5 | 6 | 6.5 Published: 2026-03-02 Last Modified: 2026-10-06 Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Kasten for Kubernetes.
    • It is recommended to upgrade Veeam Kasten and to refresh the token by manually logging out.
    • Mitigation: Configure a bucket-level Default Object Lock retention so the object store stamps new objects at write time, or upgrade to Kasten 8.5.10.
    • Veeam Kasten for Kubernetes 8.5.5 Upgrade to Go 1.26.1 to address CVE-2026-25679 and CVE-2026-27142 Updated the UBI base image to address CVE-2026-4111 Veeam Kasten for Kubernetes 8.5.3 Upgrade to Go 1.25.7 to address CVE-2025-61732.

    4 more entries in the full advisory.

    Workarounds
    • Veeam Kasten for Kubernetes 8.0.14 Improved logging security for specific block mode datamover upload Pod invocations.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Turn CVE research into alerts on your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features