Skip to content
OpenAdvisories

Vendor

NETAPP

77 known vulnerabilities.

Products

ONTAP 9 8 StorageGRID (formerly StorageGRID Webscale) 8 StorageGRID 8 SnapCenter 6 Clustered Data ONTAP 4 ONTAP Select Deploy administration utility 4 E-Series SANtricity OS Controller Software 3 Data ONTAP operating in 7-Mode 3 SnapCenter Server 3 OnCommand Unified Manager for 7-Mode (core package) 2 OnCommand Insight 2 OnCommand Unified Manager for Linux 2 Element Plug-in for vCenter Server 1 OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above 1 SAN Host Utilities for Windows 1 SnapGathers 1 NetApp HCI Baseboard Management Controller (BMC) HCI H610C, NetApp HCI Baseboard Management Controller (BMC) HCI H615C, NetApp HCI Baseboard Management Controller (BMC) HCI H610S 1 Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin 1 AltaVault OST Plug-in 1 ONTAP Mediator 1 VASA Provider for Clustered Data ONTAP 1 OnCommand Unified Manager 7-Mode 1 Active IQ OneCollect 1 OnCommand API Services and NetApp Service Level Manager 1 7-Mode Transition Tool 1 OnCommand Unified Manager for Windows 1 ATTO FibreBridge 7500N 1 Active IQ Config Advisor 1 StorageGRID Webscale 1 NetApp Service Processor 1 SANtricity Products 1 SnapCenter Plugin for VMware vSphere 1 OnCommand Cloud Manager 1 NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller 1 OnCommand Unified Manager 1 OnCommand Workflow Automation 1 Trident 1 AFF A700s Baseboard Management Controller 1 Data ONTAP < 9.8P19 0 Data ONTAP < 9.9.1P16 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-22058

    CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.

    NETAPP StorageGRID (formerly StorageGRID Webscale)
  • Critical 9.9
    CVE-2025-26512

    CVE-2025-26512 Privilege Escalation Vulnerability in SnapCenter

    SnapCenter versions prior to 6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin user on a remote system where a SnapCenter plug-in has been installed.

    NETAPP SnapCenter