Login Request a demo
NE
Vendor
Netapp
284 products with CVEs on record
10,611
CVEs
227
On KEV
4
New 30D
Products
CD
Clustered Data ONTAP
NetApp
9.8
187 CVEs2 on KEV0 new
O9
ONTAP 9
NetApp
9.1
10 CVEs1 on KEV1 new
TR
Trident
NetApp
9.8
12 CVEs0 on KEV1 new
HF
H410c Firmware
Netapp
9.8
240 CVEs13 on KEV0 new
HF
H300s Firmware
Netapp
9.8
293 CVEs12 on KEV0 new
HF
H700s Firmware
Netapp
9.8
293 CVEs12 on KEV0 new
HF
H410s Firmware
Netapp
9.8
292 CVEs12 on KEV0 new
HF
H500s Firmware
Netapp
9.8
292 CVEs12 on KEV0 new
AI
Active IQ Unified Manager
Netapp
10.0
848 CVEs9 on KEV0 new
OI
Oncommand Insight
Netapp
10.0
971 CVEs8 on KEV0 new
CB
Cloud Backup
Netapp
9.8
339 CVEs8 on KEV0 new
OB
Oncommand Balance
Netapp
9.8
83 CVEs7 on KEV0 new
ES
E-Series SANtricity OS Controller Software
NetApp
6.0
1 CVEs0 on KEV1 new
SF
StorageGRID (formerly StorageGRID Webscale)
NetApp
6.0
1 CVEs0 on KEV1 new
SO
Solidfire
Netapp
9.8
190 CVEs5 on KEV0 new
OW
Oncommand Workflow Automation
Netapp
9.8
743 CVEs4 on KEV0 new
HM
Hci Management Node
Netapp
9.8
181 CVEs4 on KEV0 new
OS
Ontap Select Deploy Administration Utility
Netapp
9.8
180 CVEs4 on KEV0 new
HF
H700e Firmware
Netapp
9.8
148 CVEs4 on KEV0 new
HF
H300e Firmware
Netapp
9.8
147 CVEs4 on KEV0 new
HF
H500e Firmware
Netapp
9.8
147 CVEs4 on KEV0 new
OS
Oncommand Shift
Netapp
9.8
64 CVEs4 on KEV0 new
HF
H610s Firmware
Netapp
9.8
62 CVEs4 on KEV0 new
BO
Bootstrap OS
Netapp
9.8
57 CVEs4 on KEV0 new
SN
Snapcenter
Netapp
10.0
576 CVEs3 on KEV0 new
OU
Oncommand Unified Manager
Netapp
9.8
169 CVEs3 on KEV0 new
SC
Steelstore Cloud Integrated Storage
Netapp
9.8
210 CVEs2 on KEV0 new
7T
7-Mode Transition Tool
NetApp
9.8
75 CVEs2 on KEV0 new
ST
StorageGRID
NetApp
9.8
74 CVEs2 on KEV0 new
OP
Oncommand Performance Manager
Netapp
9.8
73 CVEs2 on KEV0 new
DA
Data Availability Services
Netapp
9.8
61 CVEs2 on KEV0 new
SC
Snap Creator Framework
Netapp
9.8
42 CVEs2 on KEV0 new
HF
H610c Firmware
Netapp
8.6
38 CVEs2 on KEV0 new
HF
H615c Firmware
Netapp
8.6
35 CVEs2 on KEV0 new
OT
Ontap Tools
Netapp
10.0
29 CVEs2 on KEV0 new
OS
Oncommand System Manager
Netapp
9.8
27 CVEs2 on KEV0 new
CI
Cloud Insights Storage Workload Security Agent
Netapp
8.8
23 CVEs2 on KEV0 new
SN
Snapprotect
Netapp
9.8
18 CVEs2 on KEV0 new
SP
Service Processor
Netapp
9.8
13 CVEs2 on KEV0 new
CF
C400 Firmware
Netapp
8.1
6 CVEs2 on KEV0 new
CF
C250 Firmware
Netapp
8.1
5 CVEs2 on KEV0 new
ES
E-series Santricity OS Controller
Netapp
9.8
242 CVEs1 on KEV0 new
SN
Snapmanager
Netapp
9.8
180 CVEs1 on KEV0 new
ES
E-series Santricity Storage Manager
Netapp
9.8
140 CVEs1 on KEV0 new
SH
Solidfire & Hci Management Node
Netapp
9.8
103 CVEs1 on KEV0 new
ES
E-series Santricity Web Services
Netapp
9.8
99 CVEs1 on KEV0 new
SB
Solidfire Baseboard Management Controller Firmware
Netapp
9.8
71 CVEs1 on KEV0 new
VS
Virtual Storage Console
Netapp
9.8
70 CVEs1 on KEV0 new
VP
Vasa Provider For Clustered Data Ontap
Netapp
9.8
69 CVEs1 on KEV0 new
EP
E-series Performance Analyzer
Netapp
9.8
61 CVEs1 on KEV0 new
CS
Cloud Secure Agent
Netapp
10.0
57 CVEs1 on KEV0 new
CI
Cloud Insights Acquisition Unit
Netapp
8.8
53 CVEs1 on KEV0 new
HC
Hci Compute Node
Netapp
9.8
50 CVEs1 on KEV0 new
SE
Solidfire, Enterprise Sds & Hci Storage Node
Netapp
8.1
43 CVEs1 on KEV0 new
HB
Hci Baseboard Management Controller
Netapp
8.8
37 CVEs1 on KEV0 new
ES
E-series Santricity Web Services Proxy
Netapp
9.8
35 CVEs1 on KEV0 new
SB
Solidfire Baseboard Management Controller
Netapp
7.8
34 CVEs1 on KEV0 new
ES
E-series Santricity Unified Manager
Netapp
9.8
30 CVEs1 on KEV0 new
ES
E-series Santricity Management Plug-ins
Netapp
9.8
28 CVEs1 on KEV0 new
SH
Solidfire & Hci Storage Node
Netapp
10.0
27 CVEs1 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-22063
New
O9
ONTAP 9
NetApp
6.0–Oct 27CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
CVE-2026-22061
TR
Trident
NetApp
8.2
0%
Oct 9CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident
CVE-2026-22056
ST
StorageGRID
NetApp
2.3
0%
Aug 28CVE-2026-22056 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)
CVE-2026-22049
O9
ONTAP 9
NETAPP
8.8
1%
Jul 22ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when…
CVE-2026-22055
AI
Active IQ OneCollect
NETAPP
8.8
0%
Jun 3Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations
CVE-2026-22054
AI
Active IQ Config Advisor
NETAPP
8.8
0%
Jun 3Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport…
CVE-2026-22051
ST
Storagegrid
Netapp
4.3
0%
Apr 20StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability
CVE-2026-22052
ON
Ontap
Netapp
4.3
0%
Mar 5ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability
CVE-2026-22050
ON
Ontap
Netapp
4.3
0%
Jan 12ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a privileged remote…
CVE-2025-26517
ST
Storagegrid
Netapp
5.4
0%
Sep 19StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege escalation vulnerability
CVE-2025-26516
ST
Storagegrid
Netapp
5.3
0%
Sep 19StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Denial of Service vulnerability
CVE-2025-26515
ST
Storagegrid
Netapp
7.5
0%
Sep 19StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 without Single Sign-on enabled are susceptible to a Server-Side Request Forgery (SSRF)…
CVE-2025-26514
ST
Storagegrid
Netapp
6.4
0%
Sep 19StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Reflected Cross-Site Scripting vulnerability
CVE-2025-26513
SH
San Host Utilities
Netapp
7.8
0%
Aug 7The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate…
CVE-2025-27820
OT
Ontap Tools
Netapp
7.5
1%
Apr 24A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification
CVE-2025-30722
AI
Active IQ Unified Manager
Netapp
6.8
1%
Apr 15Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump)
CVE-2025-30691
BO
Bootstrap OS
Netapp
4.8
1%
Apr 15Vulnerability in Oracle Java SE (component: Compiler)
CVE-2025-21583
SN
Snapcenter
Netapp
4.9
1%
Apr 15Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL)
CVE-2025-31672
AI
Active IQ Unified Manager
Netapp
5.3
1%
Apr 9Improper Input Validation vulnerability in Apache POI
CVE-2025-1861
ON
Ontap
Netapp
9.8
1%
Mar 30In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there…
CVE-2025-1736
ON
Ontap
Netapp
7.3
1%
Mar 30In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insufficient validation of…
CVE-2025-1734
ON
Ontap
Netapp
5.3
1%
Mar 30In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when receiving headers from HTTP server, the headers missing a colon…
CVE-2025-26512
SN
Snapcenter
Netapp
9.9
1%
Mar 24SnapCenter versions prior to 6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin user on a remote …
CVE-2025-29768
BO
Bootstrap OS
Netapp
4.4
0%
Mar 13Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198
CVE-2025-25292
ST
Storagegrid
Netapp
9.8
65%
Mar 12ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby
CVE-2025-25291
ST
Storagegrid
Netapp
9.8
21%
Mar 12ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby
CVE-2024-54085
In wildKEV
SF
Sg1100 Firmware
Netapp
9.8
61%
Mar 11Redfish Authentication Bypass
CVE-2025-24813
In wildKEV
BO
Bootstrap OS
Netapp
9.8
100%
Mar 10Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
CVE-2025-27423
HC
Hci Compute Node
Netapp
7.1
22%
Mar 3Vim is an open source, command line text editor
CVE-2025-24928
HF
H700s Firmware
Netapp
7.7
0%
Feb 18libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c
CVE-2024-56171
SH
Solidfire & Hci Management Node
Netapp
9.8
1%
Feb 18libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
CVE-2025-26603
HC
Hci Compute Node
Netapp
4.2
0%
Feb 18Vim is a greatly improved version of the good old UNIX editor Vi
CVE-2025-26465
ON
Ontap
Netapp
6.8
8%
Feb 18Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled
CVE-2025-1215
BO
Bootstrap OS
Netapp
7.8
1%
Feb 12A vulnerability classified as problematic was found in vim up to 9.1.1096
CVE-2025-1181
AI
Active IQ Unified Manager
Netapp
5.0
1%
Feb 11A vulnerability classified as critical was found in GNU Binutils 2.43
CVE-2025-1178
AI
Active IQ Unified Manager
Netapp
5.6
1%
Feb 11A vulnerability was found in GNU Binutils 2.43
CVE-2025-24970
AI
Active IQ Unified Manager
Netapp
7.5
2%
Feb 10Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final
CVE-2025-0725
HB
Hci Baseboard Management Controller
Netapp
7.3
2%
Feb 5gzip integer overflow
CVE-2025-0665
BO
Bootstrap OS
Netapp
7.0
1%
Feb 5eventfd double close
CVE-2025-0167
ON
Ontap
Netapp
3.4
1%
Feb 5netrc and default credential leak
CVE-2025-0509
HC
Hci Compute Node
Netapp
6.8
1%
Feb 4A security issue was found in Sparkle before version 2.6.4
CVE-2025-0411
In wildKEV
AI
Active IQ Unified Manager
Netapp
7.0
67%
Jan 257-Zip Mark-of-the-Web Bypass Vulnerability
CVE-2025-21502
OW
Oncommand Workflow Automation
Netapp
4.8
1%
Jan 21Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
CVE-2025-21492
OI
Oncommand Insight
Netapp
4.9
1%
Jan 21Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
CVE-2025-24014
HC
Hci Compute Node Firmware
Netapp
5.5
0%
Jan 20Vim is an open source, command line text editor
CVE-2025-22134
BO
Bootstrap OS
Netapp
5.5
0%
Jan 13When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and…
CVE-2024-40896
HC
Hci Compute Node
Netapp
9.1
1%
Dec 23In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override…
CVE-2024-56337
BO
Bootstrap OS
Netapp
9.8
9%
Dec 20Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete
CVE-2024-53580
HC
Hci Compute Node
Netapp
7.5
1%
Dec 18iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function
CVE-2024-54677
BO
Bootstrap OS
Netapp
5.3
2%
Dec 17Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service
CVE-2024-50379
BO
Bootstrap OS
Netapp
9.8
32%
Dec 17Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is…
CVE-2024-11053
ON
Ontap
Netapp
3.4
2%
Dec 11netrc and redirect credential leak
CVE-2024-8932
ON
Ontap
Netapp
9.8
1%
Nov 22In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer…
CVE-2024-3447
HC
Hci Compute Node
Netapp
6.0
1%
Nov 14A heap-based buffer overflow was found in the SDHCI device emulation of QEMU
CVE-2024-52533
AI
Active IQ Unified Manager
Netapp
9.8
2%
Nov 11gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character
CVE-2024-21994
ST
Storagegrid
Netapp
4.3
0%
Nov 8StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9 are susceptible to a Denial of Service (DoS) vulnerability
CVE-2024-38286
OT
Ontap Tools
Netapp
7.5
2%
Nov 7Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat
CVE-2024-49761
OT
Ontap Tools
Netapp
7.5
1%
Oct 28REXML is an XML toolkit for Ruby
CVE-2024-50602
HF
H410s Firmware
Netapp
5.9
1%
Oct 27An issue was discovered in libexpat before 2.6.4
CVE-2024-21262
OI
Oncommand Insight
Netapp
6.5
1%
Oct 15Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC)