Login Request a demo
NE
Vendor
Netapp
286 products with CVEs on record
10,617
CVEs
227
On KEV
4
New 30D
Products
CD
Clustered Data ONTAP
NetApp
9.8
187 CVEs2 on KEV0 new
O9
ONTAP 9
NetApp
9.1
12 CVEs1 on KEV1 new
TR
Trident
NetApp
9.8
12 CVEs0 on KEV1 new
HF
H410c Firmware
Netapp
9.8
240 CVEs13 on KEV0 new
HF
H300s Firmware
Netapp
9.8
293 CVEs12 on KEV0 new
HF
H700s Firmware
Netapp
9.8
293 CVEs12 on KEV0 new
HF
H410s Firmware
Netapp
9.8
292 CVEs12 on KEV0 new
HF
H500s Firmware
Netapp
9.8
292 CVEs12 on KEV0 new
AI
Active IQ Unified Manager
Netapp
10.0
848 CVEs9 on KEV0 new
OI
Oncommand Insight
Netapp
10.0
971 CVEs8 on KEV0 new
CB
Cloud Backup
Netapp
9.8
339 CVEs8 on KEV0 new
OB
Oncommand Balance
Netapp
9.8
83 CVEs7 on KEV0 new
SF
StorageGRID (formerly StorageGRID Webscale)
NetApp
7.1
3 CVEs0 on KEV1 new
ES
E-Series SANtricity OS Controller Software
NetApp
6.0
1 CVEs0 on KEV1 new
SO
Solidfire
Netapp
9.8
190 CVEs5 on KEV0 new
OW
Oncommand Workflow Automation
Netapp
9.8
743 CVEs4 on KEV0 new
HM
Hci Management Node
Netapp
9.8
181 CVEs4 on KEV0 new
OS
Ontap Select Deploy Administration Utility
Netapp
9.8
180 CVEs4 on KEV0 new
HF
H700e Firmware
Netapp
9.8
148 CVEs4 on KEV0 new
HF
H300e Firmware
Netapp
9.8
147 CVEs4 on KEV0 new
HF
H500e Firmware
Netapp
9.8
147 CVEs4 on KEV0 new
OS
Oncommand Shift
Netapp
9.8
64 CVEs4 on KEV0 new
HF
H610s Firmware
Netapp
9.8
62 CVEs4 on KEV0 new
BO
Bootstrap OS
Netapp
9.8
57 CVEs4 on KEV0 new
SN
SnapCenter
NetApp
10.0
576 CVEs3 on KEV0 new
OU
Oncommand Unified Manager
Netapp
9.8
169 CVEs3 on KEV0 new
SC
Steelstore Cloud Integrated Storage
Netapp
9.8
210 CVEs2 on KEV0 new
7T
7-Mode Transition Tool
NetApp
9.8
75 CVEs2 on KEV0 new
ST
StorageGRID
NetApp
9.8
74 CVEs2 on KEV0 new
OP
Oncommand Performance Manager
Netapp
9.8
73 CVEs2 on KEV0 new
DA
Data Availability Services
Netapp
9.8
61 CVEs2 on KEV0 new
SC
Snap Creator Framework
Netapp
9.8
42 CVEs2 on KEV0 new
HF
H610c Firmware
Netapp
8.6
38 CVEs2 on KEV0 new
HF
H615c Firmware
Netapp
8.6
35 CVEs2 on KEV0 new
OT
Ontap Tools
Netapp
10.0
29 CVEs2 on KEV0 new
OS
Oncommand System Manager
Netapp
9.8
27 CVEs2 on KEV0 new
CI
Cloud Insights Storage Workload Security Agent
Netapp
8.8
23 CVEs2 on KEV0 new
SN
Snapprotect
Netapp
9.8
18 CVEs2 on KEV0 new
SP
Service Processor
Netapp
9.8
13 CVEs2 on KEV0 new
CF
C400 Firmware
Netapp
8.1
6 CVEs2 on KEV0 new
CF
C250 Firmware
Netapp
8.1
5 CVEs2 on KEV0 new
ES
E-series Santricity OS Controller
Netapp
9.8
242 CVEs1 on KEV0 new
SN
Snapmanager
Netapp
9.8
180 CVEs1 on KEV0 new
ES
E-series Santricity Storage Manager
Netapp
9.8
140 CVEs1 on KEV0 new
SH
Solidfire & Hci Management Node
Netapp
9.8
103 CVEs1 on KEV0 new
ES
E-series Santricity Web Services
Netapp
9.8
99 CVEs1 on KEV0 new
SB
Solidfire Baseboard Management Controller Firmware
Netapp
9.8
71 CVEs1 on KEV0 new
VS
Virtual Storage Console
Netapp
9.8
70 CVEs1 on KEV0 new
VP
Vasa Provider For Clustered Data Ontap
Netapp
9.8
69 CVEs1 on KEV0 new
EP
E-series Performance Analyzer
Netapp
9.8
61 CVEs1 on KEV0 new
CS
Cloud Secure Agent
Netapp
10.0
57 CVEs1 on KEV0 new
CI
Cloud Insights Acquisition Unit
Netapp
8.8
53 CVEs1 on KEV0 new
HC
Hci Compute Node
Netapp
9.8
50 CVEs1 on KEV0 new
SE
Solidfire, Enterprise Sds & Hci Storage Node
Netapp
8.1
43 CVEs1 on KEV0 new
HB
Hci Baseboard Management Controller
Netapp
8.8
37 CVEs1 on KEV0 new
ES
E-series Santricity Web Services Proxy
Netapp
9.8
35 CVEs1 on KEV0 new
SB
Solidfire Baseboard Management Controller
Netapp
7.8
34 CVEs1 on KEV0 new
ES
E-series Santricity Unified Manager
Netapp
9.8
30 CVEs1 on KEV0 new
ES
E-series Santricity Management Plug-ins
Netapp
9.8
28 CVEs1 on KEV0 new
SH
Solidfire & Hci Storage Node
Netapp
10.0
27 CVEs1 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-22063
New
O9
ONTAP 9
NetApp
6.0
0%
Oct 27CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
CVE-2026-22061
TR
Trident
NetApp
8.2
0%
Oct 9CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident
CVE-2026-22056
ST
StorageGRID
NetApp
2.3
0%
Aug 28CVE-2026-22056 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)
CVE-2026-22049
O9
ONTAP 9
NETAPP
8.8
1%
Jul 22ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when…
CVE-2026-22055
AI
Active IQ OneCollect
NETAPP
8.8
0%
Jun 3Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations
CVE-2026-22054
AI
Active IQ Config Advisor
NETAPP
8.8
0%
Jun 3Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport…
CVE-2026-22051
SF
StorageGRID (formerly StorageGRID Webscale)
NETAPP
4.3
0%
Apr 20StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability
CVE-2026-22052
O9
ONTAP 9
NETAPP
4.3
0%
Mar 4ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability
CVE-2026-22048
SF
StorageGRID (formerly StorageGRID Webscale)
NETAPP
7.1
0%
Feb 17StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an…
CVE-2026-22050
O9
ONTAP 9
NETAPP
4.3
0%
Jan 12ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a privileged remote…
CVE-2025-26517
ST
StorageGRID
NetApp
5.4
0%
Sep 19CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale)
CVE-2025-26516
ST
StorageGRID
NetApp
5.3
0%
Sep 19CVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)
CVE-2025-26515
ST
StorageGRID
NetApp
7.5
0%
Sep 19CVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale)
CVE-2025-26514
ST
StorageGRID
NetApp
6.4
0%
Sep 19CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)
CVE-2025-26513
SH
SAN Host Utilities for Windows
NetApp
7.8
0%
Aug 7The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate…
CVE-2025-27820
OT
Ontap Tools
Netapp
7.5
1%
Apr 24Apache HttpComponents: PSL (Public Suffix List) validation bypass
CVE-2025-30722
SN
Snapcenter
Netapp
6.8
1%
Apr 15Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump)
CVE-2025-30691
BO
Bootstrap OS
Netapp
4.8
1%
Apr 15Vulnerability in Oracle Java SE (component: Compiler)
CVE-2025-21583
SN
Snapcenter
Netapp
4.9
1%
Apr 15Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL)
CVE-2025-31672
AI
Active IQ Unified Manager
Netapp
5.3
1%
Apr 9Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names
CVE-2025-1861
ON
Ontap
Netapp
9.8
1%
Mar 30Stream HTTP wrapper truncates redirect location to 1024 bytes
CVE-2025-1736
ON
Ontap
Netapp
7.3
1%
Mar 30Stream HTTP wrapper header check might omit basic auth header
CVE-2025-1734
ON
Ontap
Netapp
5.3
1%
Mar 30Streams HTTP wrapper does not fail for headers with invalid name and no colon
CVE-2025-26512
SN
SnapCenter
NetApp
9.9
1%
Mar 24CVE-2025-26512 Privilege Escalation Vulnerability in SnapCenter
CVE-2025-29768
BO
Bootstrap OS
Netapp
4.4
0%
Mar 13Vim vulnerable to potential data loss with zip.vim and special crafted zip files
CVE-2025-25292
ST
Storagegrid
Netapp
9.8
65%
Mar 12Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)
CVE-2025-25291
ST
Storagegrid
Netapp
9.8
21%
Mar 12ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)
CVE-2024-54085
In wildKEV
HF
H300s Firmware
Netapp
9.8
61%
Mar 11Redfish Authentication Bypass
CVE-2025-24813
In wildKEV
BO
Bootstrap OS
Netapp
9.8
100%
Mar 10Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
CVE-2025-27423
HC
Hci Compute Node
Netapp
7.1
22%
Mar 3Improper Input Validation in Vim
CVE-2025-26603
HC
Hci Compute Node
Netapp
4.2
0%
Feb 18heap-use-after-free in function str_to_reg in vim/vim
CVE-2025-26465
AI
Active IQ Unified Manager
Netapp
6.8
8%
Feb 18Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled
CVE-2024-56171
HC
Hci Compute Node
Netapp
9.8
1%
Feb 18libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
CVE-2025-24928
HF
H300s Firmware
Netapp
7.7
0%
Feb 18libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c
CVE-2025-26511
IF
Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin
NetApp
8.8
1%
Feb 13Cassandra-Lucene-Index allows bypass of Cassandra RBAC
CVE-2025-1215
BO
Bootstrap OS
Netapp
7.8
1%
Feb 12vim main.c memory corruption
CVE-2025-1181
OS
Ontap Select Deploy Administration Utility
Netapp
5.0
1%
Feb 11GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption
CVE-2025-1178
AI
Active IQ Unified Manager
Netapp
5.6
1%
Feb 11GNU Binutils ld libbfd.c bfd_putl64 memory corruption
CVE-2025-24970
OI
Oncommand Insight
Netapp
7.5
2%
Feb 10SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
CVE-2025-0725
HH
Hci H610s Firmware
Netapp
7.3
2%
Feb 5gzip integer overflow
CVE-2025-0665
HF
H500s Firmware
Netapp
7.0
1%
Feb 5eventfd double close
CVE-2025-0167
OT
Ontap Tools
Netapp
3.4
1%
Feb 5netrc and default credential leak
CVE-2025-0509
HC
Hci Compute Node
Netapp
6.8
1%
Feb 4Signing Checks Bypass
CVE-2025-0411
In wildKEV
AI
Active IQ Unified Manager
Netapp
7.0
67%
Jan 257-Zip Mark-of-the-Web Bypass Vulnerability
CVE-2025-21502
OW
Oncommand Workflow Automation
Netapp
4.8
1%
Jan 21Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
CVE-2025-21492
OI
Oncommand Insight
Netapp
4.9
1%
Jan 21Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
CVE-2025-24014
HC
Hci Compute Node Firmware
Netapp
5.5
0%
Jan 20segmentation fault in win_line() in Vim < 9.1.1043
CVE-2025-22134
BO
Bootstrap OS
Netapp
5.5
0%
Jan 13heap-buffer-overflow with visual mode in Vim < 9.1.1003
CVE-2024-40896
SH
Solidfire & Hci Management Node
Netapp
9.1
1%
Dec 23In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override…
CVE-2024-56337
BO
Bootstrap OS
Netapp
9.8
9%
Dec 20Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete
CVE-2024-53580
HC
Hci Compute Node
Netapp
7.5
1%
Dec 18iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function
CVE-2024-54677
BO
Bootstrap OS
Netapp
5.3
2%
Dec 17Apache Tomcat: DoS in examples web application
CVE-2024-50379
BO
Bootstrap OS
Netapp
9.8
32%
Dec 17Apache Tomcat: RCE due to TOCTOU issue in JSP compilation
CVE-2024-11053
HF
H410s Firmware
Netapp
3.4
2%
Dec 11netrc and redirect credential leak
CVE-2024-8932
ON
Ontap
Netapp
9.8
1%
Nov 22OOB access in ldap_escape
CVE-2024-3447
HC
Hci Compute Node
Netapp
6.0
1%
Nov 14Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()
CVE-2024-52533
AI
Active IQ Unified Manager
Netapp
9.8
2%
Nov 11gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character
CVE-2024-21994
ST
StorageGRID
NetApp
4.3
0%
Nov 8CVE-2024-21994 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)
CVE-2024-38286
OT
Ontap Tools
Netapp
7.5
2%
Nov 7Apache Tomcat: Denial of Service
CVE-2024-49761
OT
Ontap Tools
Netapp
7.5
1%
Oct 28REXML ReDoS vulnerability