Clustered Data ONTAP

16 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-232419.11.1 through 9.11.1P2Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could allHIGH 8.10.9 %
CVE-2021-27005Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allowHIGH 7.51.3 %
CVE-2021-270019.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow anMEDIUM 5.50.3 %
CVE-2021-27003Versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a cliMEDIUM 4.70.6 %
CVE-2021-26994Versions prior to 9.7P13 and 9.8P3Clustered Data ONTAP versions prior to 9.7P13 and 9.8P3 are susceptible to a vulnerability which could allow single workloads to cause a DenMEDIUM 6.50.8 %
CVE-2021-26989Prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which could allow a remote aMEDIUM 6.51.3 %
CVE-2021-26988Prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorizLOW 3.50.4 %
CVE-2020-8590Versions prior to 9.1P18 and 9.3P12Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacker to discover node nLOW 3.30.3 %
CVE-2020-8578Versions prior to 9.3P20Clustered Data ONTAP versions prior to 9.3P20 are susceptible to a vulnerability which could allow an attacker to discover node names via AuLOW 3.30.3 %
CVE-2020-8589Versions prior to 9.3P20 and 9.5P15Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to dLOW 3.50.6 %
CVE-2020-8588Versions prior to 9.3P20 and 9.5P15Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to dLOW 3.50.6 %
CVE-2020-8581Versions prior to 9.3P20 and 9.5Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorizedMEDIUM 6.50.9 %
CVE-2020-85799.7 through 9.7P7Clustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows an attacker with access to an intercluster LHIGH 7.51.3 %
CVE-2020-8576Versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7Clustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when successfully exploited coMEDIUM 5.40.7 %
CVE-2019-55089.2 and higherClustered Data ONTAP versions 9.2 through 9.4 are susceptible to a vulnerability which allows an attacker to use l2ping to cause a Denial ofHIGH 7.51.3 %
CVE-2019-55069.0 and higherClustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impMEDIUM 5.90.8 %