Netapp vulnerabilities

Products

• Oncommand Insight 973
• Active Iq Unified Manager 850
• Oncommand Workflow Automation 744
• Snapcenter 577
• Cloud Backup 349
• H700s Firmware 294
• H300s Firmware 293
• H410s Firmware 293
• H500s Firmware 293
• E-series Santricity Os Controller 242
• H410c Firmware 241
• Steelstore Cloud Integrated Storage 216
• Solidfire 192
• Clustered Data Ontap 189
• Hci Management Node 182
• Ontap Select Deploy Administration Utility 180
• Snapmanager 180
• Oncommand Unified Manager 169
• H700e Firmware 149
• H300e Firmware 148
• H500e Firmware 148
• E-series Santricity Storage Manager 140
• Storage Automation Store 113
• Solidfire \& Hci Management Node 103
• Element Software 100
• E-series Santricity Web Services 99
• Oncommand Balance 83
• Santricity Unified Manager 77
• 7-mode Transition Tool 75
• Storagegrid 74
• Oncommand Performance Manager 73
• Solidfire Baseboard Management Controller Firmware 71
• Virtual Storage Console 70
• Plug-in For Symantec Netbackup 69
• Vasa Provider For Clustered Data Ontap 69
• Oncommand Shift 64
• Storage Replication Adapter For Clustered Data Ontap 63
• H610s Firmware 62
• Data Availability Services 61
• E-series Performance Analyzer 61

Show 160 moreShow less

• Bootstrap Os 57
• Cloud Secure Agent 57
• Cloud Insights Acquisition Unit 53
• Hci Compute Node 51
• Solidfire\, Enterprise Sds \& Hci Storage Node 43
• Data Ontap 42
• Snap Creator Framework 42
• H610c Firmware 38
• Hci Baseboard Management Controller 38
• E-series Santricity Web Services Proxy 35
• H615c Firmware 35
• Hci Compute Node Firmware 34
• Solidfire Baseboard Management Controller 34
• A700s Firmware 32
• E-series Santricity Unified Manager 30
• Ontap Tools 30
• Service Level Manager 29
• E-series Santricity Management Plug-ins 28
• Management Services For Element Software 28
• Hci Bootstrap Os 27
• Hci Storage Node 27
• Oncommand System Manager 27
• Santricity Cloud Connector 27
• Solidfire \& Hci Storage Node 27
• H300s 25
• H410s 25
• H500s 25
• H700s 25
• Ontap 25
• Cloud Insights Storage Workload Security Agent 23
• Clustered Data Ontap Antivirus Connector 23
• Data Ontap Edge 23
• Santricity Storage Plugin 23
• Snapcenter Server 23
• Cn1610 Firmware 22
• Fas\/aff Bios 22
• A250 Firmware 21
• Aff A400 Firmware 21
• Hci Compute Node Bios 21
• Smi-s Provider 21
• Cloud Manager 19
• Oncommand Api Services 19
• Aff A700s Firmware 18
• Snapdrive 18
• Snapprotect 18
• A400 Firmware 17
• Management Services For Netapp Hci 17
• 8300 Firmware 16
• 8700 Firmware 16
• Hci 16
• Management Services For Element Software And Netapp Hci 16
• Solidfire Bios 16
• Active Iq Performance Analytics Services 15
• Aff Baseboard Management Controller 15
• Fas\/aff Baseboard Management Controller 15
• Manageability Software Development Kit 15
• Aff 500f Firmware 14
• Data Infrastructure Insights Storage Workload Security Agent 14
• Hci Storage Node Bios 14
• 500f Firmware 13
• Bluexp 13
• Santricity Smi-s Provider 13
• Service Processor 13
• Aff 8300 Firmware 12
• Aff 8700 Firmware 12
• Trident 12
• Aff A250 Firmware 11
• Brocade San Navigator 11
• E-series Santricity Management 11
• Fas 500f Firmware 11
• Fas 8300 Firmware 11
• Fas 8700 Firmware 11
• Fas Bios 11
• H410c 11
• Oncommand Unified Manager Core Package 11
• Vasa Provider 11
• Aff Bios 10
• Cloud Insights Telegraf Agent 10
• Cloud Volumes Ontap Mediator 10
• Fas2720 Firmware 10
• Fas2750 Firmware 10
• Storagegrid (formerly Storagegrid Webscale) 10
• A220 Firmware 9
• A800 Firmware 9
• C190 Firmware 9
• Data Infrastructure Insights Acquisition Unit 9
• Element Plug-in For Vcenter Server 9
• Element Software Management Node 9
• Fas8300 Firmware 9
• Fas8700 Firmware 9
• Ontap 9 9
• Fabric-attached Storage A400 Firmware 8
• Ontap 9 8
• Ontap Select Deploy 8
• Hci H410c Firmware 7
• Max Data 7
• Santricity Web Services Proxy 7
• A320 Firmware 6
• Active Iq Unified Manager For Vmware Vsphere 6
• C400 Firmware 6
• E-series Bios 6
• Ontap Antivirus Connector 6
• Ontap Select Deploy Administration Utility 6
• Steelstore 6
• Storagegrid Webscale 6
• Storage Replication Adapter 6
• C250 Firmware 5
• Cloud Insights 5
• Cloud Insights Telegraf 5
• Element Software Management 5
• E-series Santricity Os Controller Software 5
• Fas2820 Firmware 5
• Hci Storage Node Firmware 5
• Hci Storage Nodes 5
• Hyper Converged Infrastructure 5
• Snapcenter Plug-in 5
• A150 Firmware 4
• A900 Firmware 4
• Active Iq 4
• Beegfs Csi Driver 4
• C800 Firmware 4
• Clustered Data Ontap 4
• Converged Systems Advisor Agent 4
• Data Ontap Operating In 7-mode 4
• Element 4
• Element Os 4
• Kubernetes Monitoring Operator 4
• Nextgen Api 4
• Oncommand Unified Manager For Clustered Data Ontap 4
• Virtual Storage Console For Vmware Vsphere 4
• A1k Firmware 3
• A70 Firmware 3
• A90 Firmware 3
• Aff A220 Firmware 3
• Aff C190 Firmware 3
• Altavault 3
• Astra Control Center 3
• Astra Trident 3
• Brocade Fabric Operating System 3
• Brocade Fabric Operating System Firmware 3
• Brocade Network Advisor 3
• Fabric-attached Storage 8300 Firmware 3
• Fabric-attached Storage 8700 Firmware 3
• Fas9500 Firmware 3
• Fas A400 Firmware 3
• Hci H610s Firmware 3
• Metrocluster Tiebreaker 3
• Oncommand Unified Manager For 7-mode (core Package) 3
• Snapcenter Server 3
• Solidfire Element Os 3
• Solidfire Element Os Management Node 3
• Solidfire Enterprise Sds 3
• Storage Replication Adapter For Clustered Data Ontap For Vmware Vsphere 3
• Storage Services Connector 3
• 9500 Firmware 2
• Aff A200 Firmware 2
• Aff A300 Firmware 2
• Aff A320 Firmware 2
• Aff A700 Firmware 2
• Aff Baseboard Management Controller Firmware 2

Newest

• netapp storagegrid (formerly storagegrid webscale) CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2026-22060 6.9 MediumNovember 3, 2026
• netapp storagegrid (formerly storagegrid webscale) CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2026-22058 9.1 CriticalNovember 3, 2026
• netapp e-series santricity os controller software, ontap 9, storagegrid (formerly storagegrid webscale) +2 more CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products CVE-2026-22063 6.0 MediumOctober 27, 2026
• microsoft trident CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident CVE-2026-22061 8.2 HighOctober 9, 2026
• netapp storagegrid CVE-2026-22056 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2026-22056 2.3 LowAugust 28, 2026
• netapp ontap, ontap 9 +1 more ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are... CVE-2026-22049 8.7 HighJuly 22, 2026
• netapp active iq onecollect Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an... CVE-2026-22055 5.3 MediumJune 3, 2026
• netapp active iq config advisor Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an... CVE-2026-22054 5.3 MediumJune 3, 2026
• netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 more StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are... CVE-2026-22051 2.3 LowApril 20, 2026
• netapp ontap, ontap 9 +1 more ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure... CVE-2026-22052 5.3 MediumMarch 4, 2026
• netapp storagegrid (formerly storagegrid webscale) StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single... CVE-2026-22048 7.1 HighFebruary 17, 2026
• netapp ontap, ontap 9 +1 more ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking... CVE-2026-22050 6.9 MediumJanuary 12, 2026
• netapp storagegrid CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2025-26517 5.4 MediumSeptember 19, 2025
• netapp storagegrid CVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2025-26516 5.3 MediumSeptember 19, 2025
• netapp storagegrid CVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2025-26515 7.5 HighSeptember 19, 2025
• netapp storagegrid CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale) CVE-2025-26514 6.4 MediumSeptember 19, 2025
• netapp san host utilities for windows, san host utilities +1 more The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a... CVE-2025-26513 7.0 HighAugust 7, 2025
• apache httpclient, apache software foundation httpcomponents, netapp ontap tools +2 more Apache HttpComponents: PSL (Public Suffix List) validation bypass CVE-2025-27820 Fix available 7.5 HighApril 24, 2025
• oracle mysql client, netapp active iq unified manager, snapcenter +1 more +3 more Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). ... CVE-2025-30722 Fix available 5.3 MediumApril 15, 2025
• oracle graalvm for jdk, jdk, oracle corporation java se +2 more +4 more Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are... CVE-2025-30691 Fix available 4.8 MediumApril 15, 2025
• oracle mysql server, netapp snapcenter +1 more Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported... CVE-2025-21583 4.9 MediumApril 15, 2025
• apache poi, netapp active iq unified manager +1 more Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names CVE-2025-31672 Fix available 5.3 MediumApril 9, 2025
• netapp snapcenter CVE-2025-26512 Privilege Escalation Vulnerability in SnapCenter CVE-2025-26512 9.9 CriticalMarch 24, 2025
• php, netapp ontap +1 more Stream HTTP wrapper truncates redirect location to 1024 bytes CVE-2025-1861 Fix available 6.3 MediumMarch 14, 2025
• php, netapp ontap +1 more Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 Fix available 6.3 MediumMarch 14, 2025
• php, netapp ontap +1 more Streams HTTP wrapper does not fail for headers with invalid name and no colon CVE-2025-1734 Fix available 6.3 MediumMarch 14, 2025
• vim, netapp bootstrap os +1 more Vim vulnerable to potential data loss with zip.vim and special crafted zip files CVE-2025-29768 Fix available 4.4 MediumMarch 13, 2025
• omniauth saml, onelogin ruby-saml, netapp storagegrid +2 more Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential) CVE-2025-25292 Fix available EPSS 65.1% 9.3 CriticalMarch 12, 2025
• omniauth saml, onelogin ruby-saml, netapp storagegrid +2 more ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential) CVE-2025-25291 Fix available EPSS 21.0% 9.3 CriticalMarch 12, 2025
• ami megarac spx, megarac-spx, megarac sp-x +9 more +11 more Redfish Authentication Bypass CVE-2024-54085 In KEVPublic exploit EPSS 60.7% 10.0 CriticalMarch 11, 2025
• apache tomcat, debian linux, netapp bootstrap os +2 more Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT CVE-2025-24813 In KEVPublic exploitFix available EPSS 99.9% 9.8 CriticalMarch 10, 2025
• vim, netapp hci compute node +1 more Improper Input Validation in Vim CVE-2025-27423 Fix available EPSS 22.5% 7.1 HighMarch 3, 2025
• vim, netapp hci compute node +1 more heap-use-after-free in function str_to_reg in vim/vim CVE-2025-26603 Fix available 4.2 MediumFebruary 18, 2025
• openbsd openssh, debian linux, netapp active iq unified manager +15 more +17 more Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled CVE-2025-26465 Public exploitFix available 6.8 MediumFebruary 18, 2025
• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in... CVE-2025-24928 Fix available 7.8 HighFebruary 18, 2025
• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in... CVE-2024-56171 Fix available 7.8 HighFebruary 18, 2025
• netapp instaclustr fork of stratio's cassandra-lucene-index plugin Cassandra-Lucene-Index allows bypass of Cassandra RBAC CVE-2025-26511 Fix available 8.8 HighFebruary 13, 2025
• vim, netapp bootstrap os +1 more vim main.c memory corruption CVE-2025-1215 Fix available 2.4 LowFebruary 12, 2025
• gnu binutils, netapp active iq unified manager, ontap select deploy administration utility +2 more GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption CVE-2025-1181 Fix available 2.3 LowFebruary 11, 2025
• gnu binutils, netapp active iq unified manager, ontap select deploy administration utility +2 more GNU Binutils ld libbfd.c bfd_putl64 memory corruption CVE-2025-1178 Fix available 6.3 MediumFebruary 11, 2025
• curl, haxx libcurl, netapp hci baseboard management controller +24 more +26 more gzip integer overflow CVE-2025-0725 Fix available 7.3 HighFebruary 5, 2025
• curl, netapp bootstrap os, h300s firmware +23 more +25 more eventfd double close CVE-2025-0665 Fix available 7.0 HighFebruary 5, 2025
• curl, netapp bootstrap os, element software +32 more +34 more netrc and default credential leak CVE-2025-0167 Fix available 3.4 LowFebruary 5, 2025
• sparkle project sparkle, netapp hci compute node, oncommand workflow automation +2 more Signing Checks Bypass CVE-2025-0509 Fix available 7.3 HighFebruary 4, 2025
• 7-zip, netapp active iq unified manager +1 more 7-Zip Mark-of-the-Web Bypass Vulnerability CVE-2025-0411 In KEVPublic exploit EPSS 47.6% 7.0 HighJanuary 25, 2025
• oracle graalvm, graalvm for jdk, jdk +9 more +11 more Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... CVE-2025-21502 Fix available 4.8 MediumJanuary 21, 2025
• oracle mysql server, netapp active iq unified manager, oncommand insight +1 more +3 more Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... CVE-2025-21492 Fix available 4.9 MediumJanuary 21, 2025
• vim, netapp hci compute node firmware +1 more segmentation fault in win_line() in Vim < 9.1.1043 CVE-2025-24014 Fix available 4.2 MediumJanuary 20, 2025
• vim, neovim, netapp bootstrap os +2 more heap-buffer-overflow with visual mode in Vim < 9.1.1003 CVE-2025-22134 Fix available 4.2 MediumJanuary 13, 2025
• apache tomcat, netapp bootstrap os +1 more Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete CVE-2024-56337 Fix available 9.8 CriticalDecember 20, 2024
• Show olderLoading…