Skip to content
VulniPulse
Sign in
Highest advisory severityHigh 2 vendors · 2 advisories

CVE-2025-49795

CVE-2025-49795: 2 tracked advisory records across NetApp, Red Hat. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

NetApp

1 advisory
  • Advisory severityHigh7.5

    High [CVE-2025-49795] Libxml2 Vulnerability in NetApp Products

    NTAP-20251017-0001Source published Source updated

    Multiple NetApp products incorporate libxml2. Libxml2 through 2.14.4 versions are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp Manageability SDK, NetApp SolidFire & HCI Management Node, NetApp SolidFire & HCI Storage Node (Element Software), SnapManager for Hyper-V. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.

    Affected products in this advisory
    • NetApp Manageability SDK
    • NetApp SolidFire & HCI Management Node
    • NetApp SolidFire & HCI Storage Node (Element Software)
    • SnapManager for Hyper-V
    Source-reported affected versions
    • 2.14.4
    Source-reported fixed versions
    • NetApp Manageability SDK: 9.8P11
    Mitigation guidance
    • Update affected NetApp products to a fixed release: NetApp Manageability SDK: 9.8P11.
    • SnapManager for Hyper-V has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
    Full advisory and evidenceOpen source bulletin

Red Hat

1 advisory
  • Advisory severityHigh7.5

    High [CVE-2025-49795] Libxml: null pointer dereference leads to denial of service (dos)

    CVE-2025-49795Source published Source updated

    A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service. This vulnerability marked as Important rather than Moderate due to its triggerability through untrusted input and impact on availability in a widely-used XML processing library like libxml2, which is often embedded in system-level and server-side applications. Although it is "just" a NULL pointer dereference—typically classified as a DoS—the context significantly elevates its severity. libxml2 frequently operates in environments that parse external XML content, such as web services, security scanners, and document processors. A crafted XML exploiting malformed XPath in Schematron…

    Affected products in this advisory
    • Red Hat Enterprise Linux 10
    • Red Hat Hardened Images
    • Red Hat Enterprise Linux 6
    • Red Hat package: libxml2
    Source-reported affected versions
    Affected-version details not available in this record.
    Source-reported fixed versions
    • libxml2-0:2.12.5-7.el10_0
    • libxml2-main-2.15.2-0.3.hum1
    • RHSA-2025:10630
    • RHSA-2026:7519
    Mitigation guidance
    • Mitigation is either unavailable or does not meet Red Hat Product Security standards for usability, deployment, applicability, or stability.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Turn CVE research into alerts on your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features