CVEs published in January 2025
32 tracked CVEs from 8 vendors had their first vendor advisory published in January 2025: 13 critical, 8 high, 5 in CISA KEV. Newest first.
17 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2024-45337Critical
golang.org/x/crypto Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-0367Medium
In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnerable…
Splunk · 1 advisory - Added
CVE-2025-23057Medium
vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could
Aruba · 1 advisory - Added
CVE-2025-23056Medium
vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could
Aruba · 1 advisory - Added
CVE-2025-23055Medium
vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could
Aruba · 1 advisory - Added
CVE-2025-23054Medium
vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could
Aruba · 1 advisory - Added
CVE-2025-23053Medium
privilege escalation vulnerability exists in the web-based management interface of HPE Aruba Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2025-21536Critical
NetApp · 1 advisory - Added
CVE-2025-21534Critical
NetApp · 1 advisory - Added
CVE-2025-21525Critical
NetApp · 1 advisory - Added
CVE-2025-21521Critical
NetApp · 1 advisory - Added
CVE-2025-21504Critical
NetApp · 1 advisory - Added
CVE-2025-21494Critical
NetApp · 1 advisory - Added
CVE-2024-38821Critical
Spring Security Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-13176Medium
OpenSSL Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-23006UnratedCISA KEV
SonicWall SMA1000 Appliances Deserialization Vulnerability
SonicWall · 1 advisory - Added
CVE-2025-23051High
authenticated parameter injection vulnerability exists in the web-based management interface of the AOS-8 and AOS-10…
Aruba · 1 advisory - Added
CVE-2024-48885High
Fortinet · 1 advisory - Added
CVE-2024-48884High
Fortinet · 1 advisory - Added
CVE-2025-24472CriticalCISA KEV
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Fortinet · 2 advisories - Added
CVE-2024-55591CriticalCISA KEV
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Fortinet · 2 advisories - Added
out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0…
Fortinet · 1 advisory - Added
CVE-2025-0107High
Palo Alto · 1 advisory - Added
CVE-2025-0106High
Palo Alto · 1 advisory - Added
CVE-2025-0105High
Palo Alto · 1 advisory - Added
CVE-2025-0104High
Palo Alto · 1 advisory - Added
CVE-2025-0103High
Palo Alto · 1 advisory - Added
CVE-2024-53704UnratedCISA KEV
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
SonicWall · 1 advisory - Added
CVE-2025-0282CriticalCISA KEV
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Ivanti · 1 advisory - Added
CVE-2025-22621Medium
In versions 1.0.67 and lower of the Splunk App for SOAR, the Splunk documentation for that app recommended adding the…
Splunk · 1 advisory - Added
CVE-2024-56337Critical
Apache Tomcat Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-52046Critical
Apache MINA Vulnerability in NetApp Products
Apache, NetApp · 3 advisories