Vendor

NETAPP

77 known vulnerabilities.

Products

ONTAP 9 8 StorageGRID (formerly StorageGRID Webscale) 8 StorageGRID 8 SnapCenter 6 Clustered Data ONTAP 4 ONTAP Select Deploy administration utility 4 E-Series SANtricity OS Controller Software 3 Data ONTAP operating in 7-Mode 3 SnapCenter Server 3 OnCommand Unified Manager for 7-Mode (core package) 2 OnCommand Insight 2 OnCommand Unified Manager for Linux 2 Element Plug-in for vCenter Server 1 OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above 1 SAN Host Utilities for Windows 1 SnapGathers 1 NetApp HCI Baseboard Management Controller (BMC) HCI H610C, NetApp HCI Baseboard Management Controller (BMC) HCI H615C, NetApp HCI Baseboard Management Controller (BMC) HCI H610S 1 Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin 1 AltaVault OST Plug-in 1 ONTAP Mediator 1 VASA Provider for Clustered Data ONTAP 1 OnCommand Unified Manager 7-Mode 1 Active IQ OneCollect 1 OnCommand API Services and NetApp Service Level Manager 1 7-Mode Transition Tool 1 OnCommand Unified Manager for Windows 1 ATTO FibreBridge 7500N 1 Active IQ Config Advisor 1 StorageGRID Webscale 1 NetApp Service Processor 1 SANtricity Products 1 SnapCenter Plugin for VMware vSphere 1 OnCommand Cloud Manager 1 NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller 1 OnCommand Unified Manager 1 OnCommand Workflow Automation 1 Trident 1 AFF A700s Baseboard Management Controller 1 Data ONTAP < 9.8P19 0 Data ONTAP < 9.9.1P16 0

All Critical High Medium Low Exploited only Public exploit

77 results · Feed

Unscored —

CVE-2019-17274

NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shi…

NETAPP NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller

Feb 26, 2020
Unscored —

CVE-2019-17273

E-Series SANtricity OS Controller Software version 11.60.0 is susceptible to a vulnerability which allows an attacker t…

NETAPP E-Series SANtricity OS Controller Software

Jan 30, 2020
Unscored —

CVE-2019-17272

All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully e…

NETAPP ONTAP Select Deploy administration utility

Nov 21, 2019
Unscored —

CVE-2019-5509

ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerabi…

NETAPP ONTAP Select Deploy administration utility

Nov 21, 2019
Unscored —

CVE-2019-5503

OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which coul…

NETAPP OnCommand Workflow Automation

Sep 10, 2019
Unscored —

CVE-2019-5498

OnCommand Insight versions through 7.3.6 may disclose sensitive account information to an authenticated user.

NETAPP OnCommand Insight

Aug 9, 2019
Unscored —

CVE-2019-5501

Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthentic…

NETAPP Data ONTAP operating in 7-Mode

Aug 2, 2019
Unscored —

CVE-2019-5493

Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 are susceptible to a vulnerability which discloses information…

NETAPP Data ONTAP operating in 7-Mode

Aug 2, 2019
Unscored —

CVE-2019-5497

NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default ac…

NETAPP AFF A700s Baseboard Management Controller

Jul 1, 2019
Unscored —

CVE-2019-5496

Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an…

NETAPP OnCommand Insight

May 10, 2019
Unscored —

CVE-2019-5495

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security head…

NETAPP OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above Linux Windows Virtualization

May 10, 2019
Unscored —

CVE-2019-5494

OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which …

NETAPP OnCommand Unified Manager 7-Mode

May 10, 2019
Unscored —

CVE-2019-5492

Element Plug-in for vCenter Server versions prior to 4.2.3 may disclose sensitive account information to an unauthentic…

NETAPP Element Plug-in for vCenter Server Virtualization

Apr 29, 2019
Unscored —

CVE-2019-5490

Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a de…

NETAPP NetApp Service Processor

Mar 21, 2019
Unscored —

CVE-2018-5482

NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can…

NETAPP SnapCenter Server

Mar 4, 2019
Unscored —

CVE-2017-15515

NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privilege…

NETAPP SnapCenter Server

Mar 4, 2019
Unscored —

CVE-2019-5491

Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses…

NETAPP Clustered Data ONTAP

Feb 27, 2019
Unscored —

CVE-2018-5499

ATTO FibreBridge 7500N firmware version 2.95 is susceptible to a vulnerability which allows attackers to cause a Denial…

NETAPP ATTO FibreBridge 7500N

Feb 12, 2019
Unscored —

CVE-2018-5498

Clustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows remote authenticated atta…

NETAPP Clustered Data ONTAP

Feb 1, 2019
Unscored —

CVE-2018-5497

Clustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a vulnerability which discloses sens…

NETAPP Clustered Data ONTAP

Jan 24, 2019
Unscored —

CVE-2018-5481

OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certa…

NETAPP OnCommand Unified Manager for 7-Mode (core package)

Jan 7, 2019
Unscored —

CVE-2018-5496

Data ONTAP operating in 7-Mode versions prior to 8.2.5P2 are susceptible to a vulnerability which discloses sensitive i…

NETAPP Data ONTAP operating in 7-Mode

Dec 4, 2018
Unscored —

CVE-2018-5495

All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to …

NETAPP StorageGRID Webscale

Nov 14, 2018
Unscored —

CVE-2018-5492

NetApp E-Series SANtricity OS Controller Software 11.30 and later version 11.30.5 is susceptible to unauthenticated rem…

NETAPP E-Series SANtricity OS Controller Software

Oct 4, 2018
Unscored —

CVE-2018-5490

Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and the…

NETAPP Clustered Data ONTAP

Aug 3, 2018
Unscored —

CVE-2018-5489

NetApp 7-Mode Transition Tool allows users with valid credentials to access functions and information which may have be…

NETAPP 7-Mode Transition Tool

Aug 3, 2018
Unscored —

CVE-2017-7568

NetApp OnCommand Unified Manager for 7-Mode (core package) versions prior to 5.2.3 may disclose sensitive LDAP account …

NETAPP OnCommand Unified Manager for 7-Mode (core package)

Jun 22, 2018
Unscored —

CVE-2018-5488

NetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through 2.12.X000.0002 and SANtricity Storage Manager 11.3…

NETAPP SANtricity Products

Jun 13, 2018
Unscored —

CVE-2018-5485

NetApp OnCommand Unified Manager for Windows versions 7.2 through 7.3 are susceptible to a vulnerability which could le…

NETAPP OnCommand Unified Manager for Windows Windows

May 24, 2018
Unscored —

CVE-2018-5487

NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management Extension Remote Meth…

NETAPP OnCommand Unified Manager for Linux Linux

May 24, 2018
Unscored —

CVE-2018-5486

NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol (JDWP) enable…

NETAPP OnCommand Unified Manager for Linux Linux

Apr 25, 2018
Unscored —

CVE-2017-15519

Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data …

NETAPP SnapCenter

Mar 6, 2018
Unscored —

CVE-2017-15518

All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 log a privileged d…

NETAPP OnCommand API Services and NetApp Service Level Manager

Feb 23, 2018
Unscored —

CVE-2016-6904

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authenti…

NETAPP VASA Provider for Clustered Data ONTAP

Dec 11, 2017
Unscored —

CVE-2017-15517

AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vecto…

NETAPP AltaVault OST Plug-in

Nov 17, 2017
Unscored —

CVE-2017-15516

NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability …

NETAPP SnapCenter Server

Nov 16, 2017
Unscored —

CVE-2017-11461

NetApp OnCommand Unified Manager for 7-mode (core package) versions prior to 5.2.1 are susceptible to a clickjacking or…

NETAPP OnCommand Unified Manager

Nov 9, 2017

NETAPP

Products

NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shi…

E-Series SANtricity OS Controller Software version 11.60.0 is susceptible to a vulnerability which allows an attacker t…

All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully e…

ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerabi…

OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which coul…

OnCommand Insight versions through 7.3.6 may disclose sensitive account information to an authenticated user.

Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthentic…

Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 are susceptible to a vulnerability which discloses information…

NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default ac…

Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an…

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security head…

OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which …

Element Plug-in for vCenter Server versions prior to 4.2.3 may disclose sensitive account information to an unauthentic…

Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a de…

NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can…

NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privilege…

Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses…

ATTO FibreBridge 7500N firmware version 2.95 is susceptible to a vulnerability which allows attackers to cause a Denial…

Clustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows remote authenticated atta…

Clustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a vulnerability which discloses sens…

OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certa…

Data ONTAP operating in 7-Mode versions prior to 8.2.5P2 are susceptible to a vulnerability which discloses sensitive i…

All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to …

NetApp E-Series SANtricity OS Controller Software 11.30 and later version 11.30.5 is susceptible to unauthenticated rem…

Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and the…

NetApp 7-Mode Transition Tool allows users with valid credentials to access functions and information which may have be…

NetApp OnCommand Unified Manager for 7-Mode (core package) versions prior to 5.2.3 may disclose sensitive LDAP account …

NetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through 2.12.X000.0002 and SANtricity Storage Manager 11.3…

NetApp OnCommand Unified Manager for Windows versions 7.2 through 7.3 are susceptible to a vulnerability which could le…

NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management Extension Remote Meth…

NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol (JDWP) enable…

Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data …

All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 log a privileged d…

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authenti…

AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vecto…

NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability …

NetApp OnCommand Unified Manager for 7-mode (core package) versions prior to 5.2.1 are susceptible to a clickjacking or…