Ontap 9 vulnerabilities

8 known vulnerabilities in Ontap 9 from NetApp. 8 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  ONTAP 9: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-22049Jul 22, 2026NetApp

  ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA.

• 7.5 High severity

  OpenSSL: Access of Resource Using Incompatible Type

  CVE-2024-6119Sep 3, 2024OpenSSLEPSS 66.6%

  Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of

• 9.1 Critical severity

  Apache HTTP Server Improper Escaping of Output Exploited

  CVE-2024-38475Jul 1, 2024ApacheEPSS 100%

  Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code

• 7.6 High severity

  ONTAP 9: Improper Privilege Management

  CVE-2024-21985Jan 26, 2024NetApp

  ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability which could allow an authenticated user with multiple remote accounts with differing roles to perform actions via REST API beyond their intended

• 7.5 High severity

  ONTAP 9: Uncontrolled Resource Consumption

  CVE-2023-27314Oct 12, 2023NetApp

  ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2 and 9.13.1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to cause a crash of the HTTP service.

• 7.5 High severity

  OpenSSL: Improper Locking

  CVE-2022-3996Dec 13, 2022OpenSSLEPSS 1.31%

  If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems (most widely: Windows) this results in a denial of service when the affected process h

• 8.1 High severity

  SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Double Free

  CVE-2022-42915Oct 29, 2022SiemensEPSS 3.65%

  curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection to the remote server by issuing a CONNECT request to the proxy, and then tunnels the rest of the protocol through. An HT

• 7.5 High severity

  https://github.com/curl/curl: Server-Side Request Forgery

  CVE-2022-27780Jun 2, 2022Https://github.com/curl/curlEPSS 2.52%

  The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For example, a URL like `http://example.com%2F127.0.0.1/`, wou