O9
Product
ONTAP 9
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
9.1
Max CVSS
1
New 30D
Severity mix
Critical 1High 6Medium 3Low 0
Watch
Add ONTAP 9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-38475 In wildKEV | 9.1 | Jul 1 | Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. Affected: 0 |
| CVE-2026-22049 | 8.8 | Jul 22 | ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when… Affected: 9.16.1 before 9.19.1 |
| CVE-2022-42915 | 8.1 | Oct 29 | curl before 7.86.0 has a double free Affected: All versions, or not specified |
| CVE-2024-53580 | 7.5 | Dec 18 | iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function Affected: All versions, or not specified |
| CVE-2024-6119 | 7.5 | Sep 3 | Possible denial of service in X.509 name checks Affected: All versions, or not specified |
| CVE-2024-26461 | 7.5 | Feb 29 | Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c Affected: All versions, or not specified |
| CVE-2022-27780 | 7.5 | Jun 1 | The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it… Affected: 0 |
| CVE-2026-22063 New | 6.0 | Oct 27 | CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products Affected: before 9.18.1 |
| CVE-2023-27535 | 5.9 | Mar 30 | An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers Affected: All versions, or not specified |
| CVE-2024-26458 | 5.3 | Feb 29 | Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c Affected: All versions, or not specified |
Showing 10
