NetApp ONTAP 9
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-22063 | < 9.18.1 | CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products | MEDIUM 6.0 | 0.1 % | ||
| CVE-2026-22049 | 9.16.1 – < 9.19.1 | ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to th | HIGH 8.7 | 0.5 % | ||
| CVE-2026-22052 | 9.12.1 and higher | ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could al | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-22050 | 9.16.1 – < 9.16.1P9 ; 9.17.1 – < 9.17.1P2 | ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which | MEDIUM 6.9 | 0.2 % | ||
| CVE-2024-21985 | 9.0 – < 9.9.1P18 ; 9.10.1 – < 9.10.1P16 ; 9.11.1 – < 9.11.1P13 ; … | Privilege Escalation Vulnerability in ONTAP 9 | HIGH 7.6 | 0.3 % | ||
| CVE-2024-21982 | 9.4 – < 9.8P21 ; 9.9.1 – < 9.9.1P18 ; 9.10.1 – < 9.10.1P16 ; … | CVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9 | MEDIUM 6.5 | 0.4 % | ||
| CVE-2023-27317 | 9.12.1P8 ; 9.13.1P4 ; 9.13.1P5 | Information Disclosure Vulnerability in ONTAP 9 | MEDIUM 4.6 | 0.4 % | ||
| CVE-2023-27314 | < 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2, 9.13.1 | Denial of Service Vulnerability in ONTAP 9 | HIGH 7.5 | 0.9 % |