Skip to content
OpenAdvisories

Product · NETAPP

ONTAP 9

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.0
    CVE-2026-22063

    CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products

    The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relev…

    NETAPP ONTAP 9 StorageGRID (formerly StorageGRID Webscale) E-Series SANtricity OS Controller Software
  • Medium 5.3
    CVE-2026-22052

    ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Succes…

    NETAPP ONTAP 9
  • Medium 6.9
    CVE-2026-22050

    ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a…

    NETAPP ONTAP 9
  • Medium 4.8
    CVE-2024-21982

    CVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9

    ONTAP versions 9.4 and higher are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information to unprivileged attackers when the object-store profiler command is being run by an administrative user.

    NETAPP ONTAP 9
  • Medium 4.3
    CVE-2023-27317

    Information Disclosure Vulnerability in ONTAP 9

    ONTAP 9 versions 9.12.1P8, 9.13.1P4, and 9.13.1P5 are susceptible to a vulnerability which will cause all SAS-attached FIPS 140-2 drives to become unlocked after a system reboot or power cycle or a single SAS-attached FIPS 140-2 drive to become unlocked after…

    NETAPP ONTAP 9