Skip to content
OpenAdvisories

Vendor

NETAPP

77 known vulnerabilities.

Products

ONTAP 9 8 StorageGRID (formerly StorageGRID Webscale) 8 StorageGRID 8 SnapCenter 6 Clustered Data ONTAP 4 ONTAP Select Deploy administration utility 4 E-Series SANtricity OS Controller Software 3 Data ONTAP operating in 7-Mode 3 SnapCenter Server 3 OnCommand Unified Manager for 7-Mode (core package) 2 OnCommand Insight 2 OnCommand Unified Manager for Linux 2 Element Plug-in for vCenter Server 1 OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above 1 SAN Host Utilities for Windows 1 SnapGathers 1 NetApp HCI Baseboard Management Controller (BMC) HCI H610C, NetApp HCI Baseboard Management Controller (BMC) HCI H615C, NetApp HCI Baseboard Management Controller (BMC) HCI H610S 1 Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin 1 AltaVault OST Plug-in 1 ONTAP Mediator 1 VASA Provider for Clustered Data ONTAP 1 OnCommand Unified Manager 7-Mode 1 Active IQ OneCollect 1 OnCommand API Services and NetApp Service Level Manager 1 7-Mode Transition Tool 1 OnCommand Unified Manager for Windows 1 ATTO FibreBridge 7500N 1 Active IQ Config Advisor 1 StorageGRID Webscale 1 NetApp Service Processor 1 SANtricity Products 1 SnapCenter Plugin for VMware vSphere 1 OnCommand Cloud Manager 1 NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller 1 OnCommand Unified Manager 1 OnCommand Workflow Automation 1 Trident 1 AFF A700s Baseboard Management Controller 1 Data ONTAP < 9.8P19 0 Data ONTAP < 9.9.1P16 0
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.2
    CVE-2026-22061

    CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident

    Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials.

    NETAPP Trident
  • High 8.7
    CVE-2026-22049

    ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulner…

    NETAPP ONTAP 9
  • High 7.1
    CVE-2026-22048

    StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and co…

    NETAPP StorageGRID (formerly StorageGRID Webscale)
  • High 7.5
    CVE-2025-26515

    CVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 without Single Sign-on enabled are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an unauthenticated attacker to change the…

    NETAPP StorageGRID
  • High 7.0
    CVE-2025-26513

    The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when suc…

    NETAPP SAN Host Utilities for Windows Windows
  • High 8.8
    CVE-2025-26511

    Cassandra-Lucene-Index allows bypass of Cassandra RBAC

    Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when success…

    NETAPP Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin com.instaclustr:cassandra-lucene-index-plugin Maven
  • High 8.1
    CVE-2024-21989

    Privilege Escalation Vulnerability in ONTAP Select Deploy administration utility

    ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x are susceptible to a vulnerability which when successfully exploited could allow a read-only user to escalate their privileges.

    NETAPP ONTAP Select Deploy administration utility
  • High 7.6
    CVE-2024-21985

    Privilege Escalation Vulnerability in ONTAP 9

    ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability which could allow an authenticated user with multiple remote accounts with differing roles to perform actions via REST API beyond their intende…

    NETAPP ONTAP 9
  • High 8.8
    CVE-2023-27316

    Privilege Escalation Vulnerability in SnapCenter

    SnapCenter versions 4.8 through 4.9 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin user on a remote system where a SnapCenter plug-in has been installed.

    NETAPP SnapCenter
  • High 7.5
    CVE-2023-27314

    Denial of Service Vulnerability in ONTAP 9

    ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2 and 9.13.1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to cause a crash of the HTTP service.

    NETAPP ONTAP 9
  • High 8.3
    CVE-2023-27313

    Privilege Escalation Vulnerability in SnapCenter

    SnapCenter versions 3.x and 4.x prior to 4.9 are susceptible to a vulnerability which may allow an authenticated unprivileged user to gain access as an admin user.

    NETAPP SnapCenter