https://vulnogram.org/ Most recent CVEs assigned by NetApp, Inc. (netapp). https://vulnogram.org/seaview/icons/netapp.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-22061 https://vulnogram.org/CVE-2026-22061 Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials. High Fri, 09 Oct 2026 22:02:54 GMT https://vulnogram.org/CVE-2026-22056 https://vulnogram.org/CVE-2026-22056 StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard configuration and scenario are susceptible to a Denial of Service vulnerability. Successful exploit could allow an attacker with some control over the environment… Low Fri, 28 Aug 2026 21:45:53 GMT https://vulnogram.org/CVE-2026-22049 https://vulnogram.org/CVE-2026-22049 ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass… High Wed, 22 Jul 2026 18:52:14 GMT https://vulnogram.org/CVE-2026-22055 https://vulnogram.org/CVE-2026-22055 Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations. Medium Wed, 03 Jun 2026 21:55:30 GMT https://vulnogram.org/CVE-2026-22054 https://vulnogram.org/CVE-2026-22054 Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations. Medium Wed, 03 Jun 2026 21:53:48 GMT https://vulnogram.org/CVE-2026-22051 https://vulnogram.org/CVE-2026-22051 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an authenticated attacker with low privileges to run arbitrary metrics quer… Low Mon, 20 Apr 2026 21:27:36 GMT https://vulnogram.org/CVE-2026-22052 https://vulnogram.org/CVE-2026-22052 ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission. Medium Wed, 04 Mar 2026 23:22:22 GMT https://vulnogram.org/CVE-2026-22048 https://vulnogram.org/CVE-2026-22048 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerabil… High Tue, 17 Feb 2026 23:01:30 GMT https://vulnogram.org/CVE-2026-22050 https://vulnogram.org/CVE-2026-22050 ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a privileged remote attacker to set the snapshot expiry time to none. Medium Mon, 12 Jan 2026 17:15:07 GMT https://vulnogram.org/CVE-2025-26517 https://vulnogram.org/CVE-2025-26517 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege escalation vulnerability. Successful exploit could allow an unauthorized authenticated attacker to discover Grid node names and IP add… Medium Fri, 19 Sep 2025 18:53:07 GMT https://vulnogram.org/CVE-2025-26516 https://vulnogram.org/CVE-2025-26516 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Denial of Service vulnerability. Successful exploit could allow an unauthenticated attacker to cause a Denial of Service on the Admin node. Medium Network Exploitable Fri, 19 Sep 2025 18:51:12 GMT https://vulnogram.org/CVE-2025-26515 https://vulnogram.org/CVE-2025-26515 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 without Single Sign-on enabled are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an unauthenticated attacker to c… High Network Exploitable Fri, 19 Sep 2025 18:34:17 GMT https://vulnogram.org/CVE-2025-26514 https://vulnogram.org/CVE-2025-26514 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Reflected Cross-Site Scripting vulnerability. Successful exploit could allow an attacker to view or modify configuration settings or add or modi… Medium Network Exploitable Fri, 19 Sep 2025 18:31:54 GMT https://vulnogram.org/CVE-2025-26513 https://vulnogram.org/CVE-2025-26513 The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate their privileges. High Thu, 07 Aug 2025 20:29:07 GMT https://vulnogram.org/CVE-2025-26512 https://vulnogram.org/CVE-2025-26512 SnapCenter versions prior to 6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin user on a remote system where a SnapCenter plug-in has been installed. Critical Mon, 24 Mar 2025 22:06:00 GMT https://vulnogram.org/CVE-2025-26511 https://vulnogram.org/CVE-2025-26511 Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which whe… High Thu, 13 Feb 2025 15:44:06 GMT https://vulnogram.org/CVE-2024-21994 https://vulnogram.org/CVE-2024-21994 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9 are susceptible to a Denial of Service (DoS) vulnerability. Successful exploit by an authenticated attacker could lead to a service crash. Medium Fri, 08 Nov 2024 21:06:32 GMT https://vulnogram.org/CVE-2024-21993 https://vulnogram.org/CVE-2024-21993 SnapCenter versions prior to 5.0p1 are susceptible to a vulnerability which could allow an authenticated attacker to discover plaintext credentials. Medium Tue, 09 Jul 2024 21:26:03 GMT https://vulnogram.org/CVE-2024-21988 https://vulnogram.org/CVE-2024-21988 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive information via complex MiTM attacks due to a vulnerability in the SSH cryptographic implementation. Medium Network Exploitable Fri, 14 Jun 2024 21:37:46 GMT https://vulnogram.org/CVE-2024-21990 https://vulnogram.org/CVE-2024-21990 ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x contain hard-coded credentials that could allow an attacker to view Deploy configuration information and modify the account credentials. Medium Wed, 17 Apr 2024 19:35:23 GMT https://vulnogram.org/CVE-2024-21989 https://vulnogram.org/CVE-2024-21989 ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x are susceptible to a vulnerability which when successfully exploited could allow a read-only user to escalate their privileges. High Wed, 17 Apr 2024 19:32:34 GMT https://vulnogram.org/CVE-2024-21984 https://vulnogram.org/CVE-2024-21984 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 are susceptible to a difficult to exploit Reflected Cross-Site Scripting (XSS) vulnerability. Successful exploit requires the attacker to know specific information about the target in… Medium Network Exploitable Fri, 16 Feb 2024 22:37:47 GMT https://vulnogram.org/CVE-2024-21983 https://vulnogram.org/CVE-2024-21983 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 are susceptible to a Denial of Service (DoS) vulnerability. Successful exploit by an authenticated attacker could lead to an out of memory condition or node reboot. Medium Fri, 16 Feb 2024 22:35:02 GMT https://vulnogram.org/CVE-2024-21987 https://vulnogram.org/CVE-2024-21987 SnapCenter versions 4.8 prior to 5.0 are susceptible to a vulnerability which could allow an authenticated SnapCenter Server user to modify system logging configuration settings Medium Fri, 16 Feb 2024 20:27:34 GMT https://vulnogram.org/CVE-2023-27318 https://vulnogram.org/CVE-2023-27318 StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.13 are susceptible to a Denial of Service (DoS) vulnerability. A successful exploit could lead to a crash of the Local Distribution Router (LDR) service. Medium Mon, 05 Feb 2024 20:35:27 GMT https://vulnogram.org/CVE-2024-21985 https://vulnogram.org/CVE-2024-21985 ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability which could allow an authenticated user with multiple remote accounts with differing roles to perform actions via REST API beyond thei… High Fri, 26 Jan 2024 16:01:48 GMT https://vulnogram.org/CVE-2024-21982 https://vulnogram.org/CVE-2024-21982 ONTAP versions 9.4 and higher are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information to unprivileged attackers when the object-store profiler command is being run by an administrative us… Medium Thu, 11 Jan 2024 23:32:14 GMT https://vulnogram.org/CVE-2023-27319 https://vulnogram.org/CVE-2023-27319 ONTAP Mediator versions prior to 1.7 are susceptible to a vulnerability that can allow an unauthenticated attacker to enumerate URLs via REST API. Medium Network Exploitable Thu, 21 Dec 2023 21:15:51 GMT https://vulnogram.org/CVE-2023-27317 https://vulnogram.org/CVE-2023-27317 ONTAP 9 versions 9.12.1P8, 9.13.1P4, and 9.13.1P5 are susceptible to a vulnerability which will cause all SAS-attached FIPS 140-2 drives to become unlocked after a system reboot or power cycle or a single SAS-attached FIPS 140-2 drive to become unloc… Medium Fri, 15 Dec 2023 22:59:11 GMT https://vulnogram.org/CVE-2023-27316 https://vulnogram.org/CVE-2023-27316 SnapCenter versions 4.8 through 4.9 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin user on a remote system where a SnapCenter plug-in has been installed. High Thu, 12 Oct 2023 21:04:47 GMT https://vulnogram.org/CVE-2023-27314 https://vulnogram.org/CVE-2023-27314 ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2 and 9.13.1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to cause a crash of the HTTP service. High Network Exploitable Thu, 12 Oct 2023 18:26:47 GMT https://vulnogram.org/CVE-2023-27313 https://vulnogram.org/CVE-2023-27313 SnapCenter versions 3.x and 4.x prior to 4.9 are susceptible to a vulnerability which may allow an authenticated unprivileged user to gain access as an admin user. High Thu, 12 Oct 2023 18:22:28 GMT https://vulnogram.org/CVE-2023-27312 https://vulnogram.org/CVE-2023-27312 SnapCenter Plugin for VMware vSphere versions 4.6 prior to 4.9 are susceptible to a vulnerability which may allow authenticated unprivileged users to modify email and snapshot name settings within the VMware vSphere user interface. Medium Thu, 12 Oct 2023 18:19:16 GMT https://vulnogram.org/CVE-2023-27315 https://vulnogram.org/CVE-2023-27315 SnapGathers versions prior to 4.9 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext domain user credentials Medium Thu, 12 Oct 2023 13:56:38 GMT https://vulnogram.org/CVE-2023-27311 https://vulnogram.org/CVE-2023-27311 NetApp Blue XP Connector versions prior to 3.9.25 expose information via a directory listing. A new Connector architecture resolves this issue - obtaining the fix requires redeploying a fresh Connector. Medium Network Exploitable Fri, 26 May 2023 00:00:00 GMT https://vulnogram.org/CVE-2023-1096 https://vulnogram.org/CVE-2023-1096 SnapCenter versions 4.7 prior to 4.7P2 and 4.8 prior to 4.8P1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to gain access as an admin user. Critical Network Exploitable Fri, 12 May 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-38734 https://vulnogram.org/CVE-2022-38734 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0.8 are susceptible to a Denial of Service (DoS) vulnerability. A successful exploit could lead to to a crash of the Local Distribution Router (LDR) service. Thu, 02 Mar 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-23240 https://vulnogram.org/CVE-2022-23240 Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows unauthorized users to update EMS Subscriptions via unspecified vectors. Medium Tue, 28 Feb 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-23239 https://vulnogram.org/CVE-2022-23239 Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows administrative users to perform a Stored Cross-Site Scripting (XSS) attack. Tue, 28 Feb 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-38733 https://vulnogram.org/CVE-2022-38733 OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerability in the Data Warehouse component. High Network Exploitable Tue, 20 Dec 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-23241 https://vulnogram.org/CVE-2022-23241 Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could allow an authenticated remote attacker to arbitrarily modify or delete WORM data prior to the end of the retentio… High Wed, 19 Oct 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-38732 https://vulnogram.org/CVE-2022-38732 SnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which could allow certain types of attacks that otherwise would be prevented. High Network Exploitable Thu, 29 Sep 2022 14:36:58 GMT https://vulnogram.org/CVE-2022-23235 https://vulnogram.org/CVE-2022-23235 Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via Auto… Thu, 25 Aug 2022 17:25:48 GMT https://vulnogram.org/CVE-2022-23238 https://vulnogram.org/CVE-2022-23238 Linux deployments of StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.2 deployed with a Linux kernel version less than 4.7.0 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to view limi… Tue, 09 Aug 2022 20:18:39 GMT https://vulnogram.org/CVE-2022-23237 https://vulnogram.org/CVE-2022-23237 E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites. Wed, 01 Jun 2022 13:54:46 GMT https://vulnogram.org/CVE-2022-23236 https://vulnogram.org/CVE-2022-23236 E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users. Wed, 01 Jun 2022 13:46:06 GMT https://vulnogram.org/CVE-2022-23234 https://vulnogram.org/CVE-2022-23234 SnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext HANA credentials. Wed, 16 Mar 2022 14:12:31 GMT https://vulnogram.org/CVE-2022-23233 https://vulnogram.org/CVE-2022-23233 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS) of the Local Distribution Router (LDR) service. Fri, 04 Mar 2022 17:22:54 GMT https://vulnogram.org/CVE-2022-23232 https://vulnogram.org/CVE-2022-23232 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a vulnerability which when successfully exploited could allow disabled, expired, or locked external user accounts to access S3 data to which they previously had a… Fri, 04 Mar 2022 17:21:50 GMT https://vulnogram.org/CVE-2021-27006 https://vulnogram.org/CVE-2021-27006 StorageGRID (formerly StorageGRID Webscale) versions 11.5 prior to 11.5.0.5 are susceptible to a vulnerability which may allow an administrative user to escalate their privileges and modify settings in SANtricity System Manager. Thu, 23 Dec 2021 19:48:47 GMT