NetApp — Vulnerabilities & Security Advisories 69

Browse all 69 CVE security advisories affecting NetApp. AI-powered Chinese analysis, POCs, and references for each vulnerability.

NetApp operates primarily as a provider of data storage hardware and software solutions, enabling organizations to manage, protect, and analyze data across hybrid cloud environments. With sixty-six recorded Common Vulnerabilities and Exposures (CVEs), the company’s attack surface has historically been impacted by critical flaws, particularly remote code execution (RCE) and cross-site scripting (XSS) vulnerabilities within its management interfaces and web-based administration tools. These defects often stem from insufficient input validation or improper access controls in legacy components. While major public breaches directly attributed to NetApp infrastructure are rare, the high volume of CVEs indicates persistent challenges in securing complex enterprise storage ecosystems. Security updates are regularly deployed to mitigate these risks, yet the breadth of the product portfolio necessitates rigorous patch management to prevent exploitation of known weaknesses in both on-premises and cloud-integrated systems.

Found 6 results / 69 Clear Filters

Top products by NetApp: StorageGRID SnapCenter ONTAP 9 StorageGRID (formerly StorageGRID Webscale) Clustered Data ONTAP ONTAP Select Deploy administration utility SnapCenter Server Data ONTAP operating in 7-Mode OnCommand Unified Manager for 7-Mode (core package) OnCommand Unified Manager for Linux E-Series SANtricity OS Controller Software OnCommand Workflow Automation OnCommand Cloud Manager NetApp HCI Baseboard Management Controller (BMC) HCI H610C, NetApp HCI Baseboard Management Controller (BMC) HCI H615C, NetApp HCI Baseboard Management Controller (BMC) HCI H610S SnapGathers SnapCenter Plugin for VMware vSphere ONTAP Mediator ONTAP 9 StorageGRID (formerly StorageGRID Webscale) Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin SAN Host Utilities for Windows Active IQ OneCollect Active IQ Config Advisor AFF A700s Baseboard Management Controller OnCommand Insight OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above OnCommand Unified Manager 7-Mode VASA Provider for Clustered Data ONTAP NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller ATTO FibreBridge 7500N

CVE ID	Title	CVSS	Severity	Published
CVE-2026-22049	NetApp ONTAP 9 授权问题漏洞 — ONTAP 9	8.7	High	2026-07-22
CVE-2026-22052	NetApp ONTAP 安全漏洞 — ONTAP 9	4.3^AI	Medium ^AI	2026-03-04
CVE-2026-22050	NetApp ONTAP 安全漏洞 — ONTAP 9	2.7^AI	Low ^AI	2026-01-12
CVE-2024-21985	Privilege Escalation Vulnerability in ONTAP 9 — ONTAP 9 CWE-269	7.6	High	2024-01-26
CVE-2023-27317	Information Disclosure Vulnerability in ONTAP 9 — ONTAP 9 CWE-200	4.3	Medium	2023-12-15
CVE-2023-27314	Denial of Service Vulnerability in ONTAP 9 — ONTAP 9 CWE-400	7.5	High	2023-10-12

This page lists every published CVE security advisory associated with NetApp. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.