netapp clustered data ontap 9.8 vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

ONTAP versions 9.4 and higher are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information to unprivileged attackers when the object-store profiler command is being run by an administrative user.

Netapp Clustered Data Ontap 9.8 Netapp Clustered Data Ontap 9.9.1 Netapp Clustered Data Ontap 9.11.1 Netapp Clustered Data Ontap Netapp Clustered Data Ontap 9.10.1 Netapp Clustered Data Ontap 9.12.1 Netapp Clustered Data Ontap 9.13.1

7.5

CVSSv3

ONTAP 9 versions before 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2 and 9.13.1 are susceptible to a vulnerability which could allow a remote unauthenticated malicious user to cause a crash of the HTTP service.

Netapp Clustered Data Ontap 9.9.1 Netapp Clustered Data Ontap 9.8 Netapp Clustered Data Ontap 9.10.0 Netapp Clustered Data Ontap 9.10.1 Netapp Clustered Data Ontap 9.12.0 Netapp Clustered Data Ontap 9.13.0 Netapp Clustered Data Ontap

7.5

CVSSv3

Clustered Data ONTAP versions 9.6 and higher before 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allow a remote malicious user to cause a crash of the httpd server.

Netapp Ontap System Manager 9.7 Netapp Ontap System Manager 9.8 Netapp Ontap System Manager Netapp Ontap System Manager 9.9.12

5.5

CVSSv3

Clustered Data ONTAP versions 9.x before 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an authenticated privileged local malicious user to arbitrarily modify Compliance-mode WORM data prior to the end of the retention period.

Netapp Clustered Data Ontap 9.6 Netapp Clustered Data Ontap 9.5 Netapp Clustered Data Ontap 9.7 Netapp Clustered Data Ontap 9.8 Netapp Clustered Data Ontap Netapp Clustered Data Ontap 9.9.1

4.7

CVSSv3

Clustered Data ONTAP versions before 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack.

Netapp Clustered Data Ontap Netapp Clustered Data Ontap 9.5 Netapp Clustered Data Ontap 9.6 Netapp Clustered Data Ontap 9.7 Netapp Clustered Data Ontap 9.8

6.5

CVSSv3

Clustered Data ONTAP versions before 9.7P13 and 9.8P3 are susceptible to a vulnerability which could allow single workloads to cause a Denial of Service (DoS) on a cluster node.

Netapp Clustered Data Ontap Netapp Clustered Data Ontap 9.7 Netapp Clustered Data Ontap 9.8

3.5

CVSSv3

Clustered Data ONTAP versions before 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant users to discover information related to converting a 7-Mode directory to Cluster-mode such as Storage Virtual Machine (SVM) names, ...

Netapp Data Ontap 9.3.0 Netapp Data Ontap 9.5.0 Netapp Data Ontap 9.6.0 Netapp Data Ontap 9.7.0 Netapp Data Ontap 9.8.0

6.5

CVSSv3

Clustered Data ONTAP versions before 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which could allow a remote authenticated malicious user to cause a Denial of Service (DoS) on clustered Data ONTAP configured for SMB access.

Netapp Data Ontap 9.3.0 Netapp Data Ontap 9.5.0 Netapp Data Ontap 9.6.0 Netapp Data Ontap 9.7.0 Netapp Data Ontap 9.8.0

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook