CVE-2022-35737PoC(netapp / ontap_select_deploy_administration_utility)

LOWCVSS 7.5 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

netapp CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Exploit / PoC references

Vendor / third-party advisories

Weakness type (CWE)

CWE-129

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ontap_select_deploy_administration_utility
sqlite
universal_forwarder

Threat summary

Public PoC is present in monitored signal
1 mentions across 1 observed day

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

netapp splunk sqlite

Products

ontap_select_deploy_administration_utilitysqliteuniversal_forwarder

2 versions affected across 3 products

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

PoC

1100.0%

Full discourse1 post

Shaya Feedman שייע פידמן@ShayaFeedman46d
PoC
They also reproduced CVE-2022-35737 (SQLite, CVSS 7.5, CISA-listed PoC) live inside a controlled AAOS environment. Some findings old, some hard to find. Same message either way. https://t.co/jnDy0mpb6F
Post summary
The tweet reports reproducing CVE-2022-35737 (SQLite, CVSS 7.5) in a controlled environment and notes the existence of a CISA‑listed proof‑of‑concept, but provides no exploit code, active exploitation evidence, or patch information.
1000039
3.2K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	netapp	ontap_select_deploy_administration_utility	-	-	-
App	splunk	universal_forwarder	-	-	-
App	splunk	universal_forwarder	9.1.0	-	-
App	sqlite	sqlite	-	-	-

Explore more

Back to dashboard netapp CVEs splunk CVEs sqlite CVEs ontap_select_deploy_administration_utility vulnerabilities