What’s Vulnerable › Products

Clustered Data ONTAP vulnerabilities

188 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Clustered Data ONTAP version is affected

Exploited Clustered Data ONTAP vulnerabilities

• CVE-2015-5477 — ISC BIND Data Processing Errors Vulnerability
• CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF)

Latest Clustered Data ONTAP vulnerabilities

• CVE-2024-38477 — Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request (CVSS 7.5)
• CVE-2024-38476 — Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect (CVSS 9.8)
• CVE-2024-38474 — Apache HTTP Server weakness with encoded question marks in backreferences (CVSS 9.8)
• CVE-2024-21985 — Privilege Escalation Vulnerability in ONTAP 9 (CVSS 7.6)
• CVE-2024-21982 — CVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9 (CVSS 6.5)
• CVE-2023-27314 — Denial of Service Vulnerability in ONTAP 9 (CVSS 7.5)
• CVE-2023-36054 — (CVSS 6.5)
• CVE-2023-3107 — Remote denial of service in IPv6 fragment reassembly (CVSS 7.5)
• CVE-2023-38403 — (CVSS 7.5)
• CVE-2023-2953 — (CVSS 7.5)
• CVE-2023-28322 — (CVSS 3.7)
• CVE-2023-28321 — (CVSS 5.9)
• CVE-2023-28320 — (CVSS 5.9)
• CVE-2023-28319 — (CVSS 7.5)
• CVE-2023-27538 — (CVSS 5.5)
• CVE-2023-27537 — (CVSS 5.9)
• CVE-2023-27533 — (CVSS 8.8)
• CVE-2023-23916 — (CVSS 6.5)
• CVE-2023-23915 — (CVSS 6.5)
• CVE-2023-23914 — (CVSS 9.1)
• CVE-2022-35260 — (CVSS 6.5)
• CVE-2022-32221 — (CVSS 9.8)
• CVE-2022-40304 — (CVSS 7.8)
• CVE-2022-40303 — (CVSS 7.5)
• CVE-2022-3602 — X.509 Email Address 4-byte Buffer Overflow (CVSS 7.5)