netapp

Latest CVEs · RSS

• CVE-2026-22061 2026-10-09 · CVSS 8.2
  Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS
• CVE-2026-22056 2026-08-28 · CVSS 2.3
  StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard configuration and scenario are susceptible to a Denial of Service vulnera
• CVE-2026-22049 2026-07-22 · CVSS 8.7
  ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID w
• CVE-2026-22055 2026-06-03 · CVSS 5.3
  Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSu
• CVE-2026-22054 2026-06-03 · CVSS 5.3
  Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized Au
• CVE-2026-22051 2026-04-20 · CVSS 2.3
  StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful explo
• CVE-2026-22052 2026-03-04 · CVSS 5.3
  ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated
• CVE-2026-22048 2026-02-17 · CVSS 7.1
  StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (forme
• CVE-2026-22050 2026-01-12 · CVSS 6.9
  ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a privil
• CVE-2025-26517 2025-09-19 · CVSS 5.4
  StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege escalation vulnerability. Successful explo
• CVE-2025-26516 2025-09-19 · CVSS 5.3
  StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Denial of Service vulnerability. Successful exploit
• CVE-2025-26515 2025-09-19 · CVSS 7.5
  StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 without Single Sign-on enabled are susceptible to a Server-Side Request F
• CVE-2025-26514 2025-09-19 · CVSS 6.4
  StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Reflected Cross-Site Scripting vulnerability. Succe
• CVE-2025-26513 2025-08-07 · CVSS 7.0
  The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local u
• CVE-2025-26512 2025-03-24 · CVSS 9.9
  SnapCenter versions prior to 6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin u
• CVE-2025-26511 2025-02-13 · CVSS 8.8
  Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.
• CVE-2024-21994 2024-11-08 · CVSS 4.3
  StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9 are susceptible to a Denial of Service (DoS) vulnerability. Successful exploit by an authenti
• CVE-2024-21993 2024-07-09 · CVSS 5.7
  SnapCenter versions prior to 5.0p1 are susceptible to a vulnerability which could allow an authenticated attacker to discover plaintext credentials.
• CVE-2024-21988 2024-06-14 · CVSS 5.3
  StorageGRID (formerly StorageGRID Webscale) versions prior to 11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive information via complex MiTM at
• CVE-2024-21990 2024-04-17 · CVSS 5.4
  ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x contain hard-coded credentials that could allow an attacker to view Deploy
• CVE-2024-21989 2024-04-17 · CVSS 8.1
  ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x are susceptible to a vulnerability which when successfully exploited could
• CVE-2024-21984 2024-02-16 · CVSS 5.9
  StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 are susceptible to a difficult to exploit Reflected Cross-Site Scripting (XSS) vulnerabilit
• CVE-2024-21983 2024-02-16 · CVSS 6.5
  StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 are susceptible to a Denial of Service (DoS) vulnerability. Successful exploit by an authen
• CVE-2024-21987 2024-02-16 · CVSS 5.4
  SnapCenter versions 4.8 prior to 5.0 are susceptible to a vulnerability which could allow an authenticated SnapCenter Server user to modify system logging con
• CVE-2023-27318 2024-02-05 · CVSS 6.5
  StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.13 are susceptible to a Denial of Service (DoS) vulnerability. A successful exploit