Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
data ontap vulnerabilities and exploits
(subscribe to this query)
2.7
CVSSv2
CVE-2017-5201
NetApp Clustered Data ONTAP prior to 8.3.2P8 and 9.0 before P2 allow remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors, a different vulnerability than CVE-2016-3064.
Netapp Clustered Data Ontap 9.0
Netapp Clustered Data Ontap
4.3
CVSSv2
CVE-2019-5506
Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-in-the-middle attacks.
Netapp Clustered Data Ontap 9.6
Netapp Clustered Data Ontap
2.1
CVSSv2
CVE-2020-8578
Clustered Data ONTAP versions before 9.3P20 are susceptible to a vulnerability which could allow an malicious user to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true.
Netapp Clustered Data Ontap
Netapp Clustered Data Ontap 9.3
3.5
CVSSv2
CVE-2020-8581
Clustered Data ONTAP versions before 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized malicious user to overwrite arbitrary data when VMware vStorage support is enabled.
Netapp Clustered Data Ontap
Netapp Clustered Data Ontap 9.3
10
CVSSv2
CVE-2008-3160
Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 prior to 7.1.3, as used by IBM System Storage N series Filer and IBM System Storage N series Gateway, have unknown impact and attack vectors.
Ibm Data Ontap
4.3
CVSSv2
CVE-2017-12859
NetApp Data ONTAP prior to 8.2.5, when operating in 7-Mode in NFS environments, allows remote malicious users to cause a denial of service via unspecified vectors.
Netapp Data Ontap
4.3
CVSSv2
CVE-2015-7886
NetApp Data ONTAP prior to 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote malicious users to obtain sensitive volume information via unspecified vectors.
Netapp Data Ontap
4.3
CVSSv2
CVE-2016-6495
NetApp Data ONTAP prior to 8.2.4P5, when operating in 7-Mode, allows remote malicious users to obtain information about the volumes configured for HTTP access.
Netapp Data Ontap
7.5
CVSSv2
CVE-2015-7746
NetApp Data ONTAP prior to 8.2.4, when operating in 7-Mode, allows remote malicious users to bypass authentication and (1) obtain sensitive information from or (2) modify volumes via vectors related to UTF-8 in the volume language.
Netapp Data Ontap
5
CVSSv2
CVE-2017-7345
NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP prior to 7.1P1 improperly bind the Java Management Extension Remote Method Invocation (aka JMX RMI) service to the network, which allows remote malicious users to obtain sensitive informat...
Netapp Clustered Data Ontap
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »