Content Library · Advisory
Browse 447 2021 NetApp advisory records in the NetApp Black Box content library. Page 1 of 4.
Showing all 120 items on this page
Source: https://security.netapp.com/advisory/NTAP-20211229-0004/
NetApp published this final advisory covering CVE-2021-41090, CVE-2021-43798; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211229-0006/
NetApp published this final advisory covering CVE-2021-44420; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211229-0002/
NetApp published this final advisory covering CVE-2021-43527; the API labels exploitation information as **Public**. The API currently lists affected products as: E-Series SANtricity OS Controller Software 11.x; NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211229-0001/
NetApp published this final advisory covering CVE-2021-42550; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp BlueXP; NetApp Service Level Manager; Snap Creator Framework.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211229-0007/
NetApp published this final advisory covering CVE-2021-41805; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211229-0003/
NetApp published this final advisory covering CVE-2021-4044; the API labels exploitation information as **Public**. The API currently lists affected products as: Brocade Fabric Operating System Firmware; FAS/AFF Baseboard Management Controller (BMC) - A250/500f/C250; NetApp Cloud Backup (formerly AltaVault); NetApp Cloud Backup OST Plug-in (formerly AltaVault OST Plug-in); NetApp E-Series Performance Analyzer; NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; ONTAP Select Deploy administration utility; SnapCenter.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211229-0005/
NetApp published this final advisory covering CVE-2018-25020; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211224-0001/
NetApp published this final advisory covering CVE-2021-44790, CVE-2021-44224; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211223-0006/
NetApp published this final advisory covering CVE-2021-20470, CVE-2021-20493, CVE-2021-29716, CVE-2021-29719, CVE-2021-29756, CVE-2021-29867, CVE-2021-38909; the API labels exploitation information as **Public**. The API currently lists affected products as: OnCommand Insight.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211223-0002/
NetApp published this final advisory covering CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376, CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380, CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384, CVE-2021-42385, CVE-2021-42386; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp SolidFire & HCI Management Node.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211223-0001/
NetApp published this final advisory covering CVE-2021-41244; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211223-0007/
NetApp published this final advisory covering CVE-2021-4104; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211223-0008/
NetApp published this final advisory covering CVE-2021-27007; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Virtual Desktop Service (VDS).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211223-0004/
NetApp published this final advisory covering CVE-2021-23732; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211223-0005/
NetApp published this final advisory covering CVE-2021-21707; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP 9 (formerly Clustered Data ONTAP).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211223-0003/
NetApp published this final advisory covering CVE-2017-5123; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211221-0001/
NetApp published this final advisory covering CVE-2021-27006; the API labels exploitation information as **Public**. The API currently lists affected products as: StorageGRID (formerly StorageGRID Webscale).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211218-0001/
NetApp published this final advisory covering CVE-2021-45105; the API labels exploitation information as **Public**. The API currently lists affected products as: Cloud Manager; Cloud Secure Agent; NetApp SolidFire, Enterprise SDS & HCI Storage Node (Element Software); ONTAP tools for VMware vSphere.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211215-0001/
NetApp published this final advisory covering CVE-2021-45046; the API labels exploitation information as **Public**. The API currently lists affected products as: Brocade SAN Navigator (SANnav); Cloud Insights Acquisition Unit; Cloud Manager; Cloud Secure Agent; NetApp SolidFire, Enterprise SDS & HCI Storage Node (Element Software); ONTAP tools for VMware vSphere; OnCommand Insight; SnapCenter Plug-in for VMware vSphere.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211210-0001/
NetApp published this final advisory covering CVE-2021-43975, CVE-2021-43976; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211210-0003/
NetApp published this interim advisory covering CVE-2021-41771, CVE-2021-41772; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211210-0005/
NetApp published this final advisory covering CVE-2021-33058, CVE-2021-33059, CVE-2021-33098; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211210-0004/
NetApp published this final advisory covering CVE-2021-0197, CVE-2021-0198, CVE-2021-0199, CVE-2021-0200; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211210-0006/
NetApp published this final advisory covering CVE-2021-0146; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211210-0007/
NetApp published this final advisory covering CVE-2021-44228; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Linux; Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere; Brocade SAN Navigator (SANnav); Cloud Insights Acquisition Unit; Cloud Manager; Cloud Secure Agent; NetApp SolidFire, Enterprise SDS & HCI Storage Node (Element Software); ONTAP tools for VMware vSphere; OnCommand Insight; SnapCenter Plug-in for VMware vSphere.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211210-0002/
NetApp published this final advisory covering CVE-2021-43616; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211206-0001/
NetApp published this final advisory covering CVE-2016-2124, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25721, CVE-2020-25722, CVE-2021-23192, CVE-2021-3738; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211203-0002/
NetApp published this final advisory covering CVE-2019-8921, CVE-2019-8922; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211203-0004/
NetApp published this final advisory covering CVE-2021-41229; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211203-0003/
NetApp published this final advisory covering CVE-2021-3715; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H300E/H500E/H700E/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211203-0001/
NetApp published this final advisory covering CVE-2021-25742; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211203-0005/
NetApp published this final advisory covering CVE-2021-23718; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211125-0002/
NetApp published this final advisory covering CVE-2021-43267; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211125-0001/
NetApp published this final advisory covering CVE-2021-43057; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H300E/H500E/H700E/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211125-0003/
NetApp published this final advisory covering CVE-2021-41174; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211125-0005/
NetApp published this final advisory covering CVE-2021-22096; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Linux; Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere; Management Services for Element Software and NetApp HCI; MetroCluster Tiebreaker for clustered Data ONTAP; OnCommand Insight; Snap Creator Framework; SnapCenter.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211125-0004/
NetApp published this final advisory covering CVE-2011-1075; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211118-0004/
NetApp published this final advisory covering CVE-2021-41182, CVE-2021-41183, CVE-2021-41184; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp Cloud Backup OST Plug-in (formerly AltaVault OST Plug-in); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp Virtual Desktop Service (VDS); SnapCenter.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211118-0001/
NetApp published this final advisory covering CVE-2021-42739; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211118-0005/
NetApp published this final advisory covering CVE-2021-42327; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211118-0006/
NetApp published this final advisory covering CVE-2021-38297; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211118-0002/
NetApp published this final advisory covering CVE-2021-25219; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H300E/H500E/H700E/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211118-0003/
NetApp published this final advisory covering CVE-2021-21703; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP 9 (formerly Clustered Data ONTAP).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211112-0003/
NetApp published this final advisory covering CVE-2021-32028, CVE-2021-32029; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211112-0005/
NetApp published this final advisory covering CVE-2020-4951, CVE-2021-29679, CVE-2021-29745; the API labels exploitation information as **Public**. The API currently lists affected products as: OnCommand Insight.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211112-0001/
NetApp published this final advisory covering CVE-2018-25010, CVE-2018-25012, CVE-2018-25013, CVE-2020-36328, CVE-2020-36329, CVE-2020-36331; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP Select Deploy administration utility.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211112-0004/
NetApp published this final advisory covering CVE-2021-0157, CVE-2021-0158; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211112-0006/
NetApp published this final advisory covering CVE-2021-42252; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H300E/H500E/H700E/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211112-0002/
NetApp published this final advisory covering CVE-2021-22930; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211104-0003/
NetApp published this final advisory covering CVE-2021-32628, CVE-2021-41099, CVE-2021-32672, CVE-2021-32762, CVE-2021-32626, CVE-2021-32627, CVE-2021-32765, CVE-2021-32687, CVE-2021-32675; the API labels exploitation information as **Public**. The API currently lists affected products as: Management Services for Element Software and NetApp HCI.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211104-0004/
NetApp published this final advisory covering CVE-2018-25009, CVE-2018-25011, CVE-2018-25014, CVE-2020-36330, CVE-2020-36332; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP Select Deploy administration utility.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211104-0001/
NetApp published this final advisory covering CVE-2021-42340; the API labels exploitation information as **Public**. The API currently lists affected products as: Management Services for Element Software and NetApp HCI.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211104-0002/
NetApp published this final advisory covering CVE-2021-42008; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211104-0007/
NetApp published this final advisory covering CVE-2021-36222; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211104-0006/
NetApp published this final advisory covering CVE-2021-3580; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); ONTAP Select Deploy administration utility.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211104-0005/
NetApp published this final advisory covering CVE-2021-3520; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp Cloud Backup (formerly AltaVault); ONTAP Select Deploy administration utility.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211104-0008/
NetApp published this final advisory covering CVE-2021-33910; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211029-0003/
NetApp published this final advisory covering CVE-2021-22945, CVE-2021-22946, CVE-2021-22947; the API labels exploitation information as **Public**. The API currently lists affected products as: Clustered Data ONTAP; NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H300E/H500E/H700E/H410S; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211029-0006/
NetApp published this final advisory covering CVE-2021-21704, CVE-2021-21705; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP 9 (formerly Clustered Data ONTAP).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211029-0005/
NetApp published this final advisory covering CVE-2021-29825, CVE-2021-29763; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211029-0009/
NetApp published this final advisory covering CVE-2021-42013, CVE-2021-41773, CVE-2021-41524; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211029-0004/
NetApp published this interim advisory covering CVE-2021-41864; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H300E/H500E/H700E/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp SolidFire & HCI Management Node; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211029-0008/
NetApp published this final advisory covering CVE-2021-39226; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211029-0002/
NetApp published this final advisory covering CVE-2021-27005; the API labels exploitation information as **Public**. The API currently lists affected products as: Clustered Data ONTAP.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211029-0001/
NetApp published this final advisory covering CVE-2021-27004; the API labels exploitation information as **Not public**. The API currently lists affected products as: System Manager 9.x.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211029-0010/
NetApp published this final advisory covering CVE-2021-23449; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211029-0007/
NetApp published this final advisory covering CVE-2021-21706; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211022-0003/
NetApp published this final advisory covering CVE-2021-22926, CVE-2021-22931, CVE-2021-2478, CVE-2021-2479, CVE-2021-2481, CVE-2021-35537, CVE-2021-35546, CVE-2021-35575, CVE-2021-35577, CVE-2021-35583, CVE-2021-35584, CVE-2021-35590, CVE-2021-35591, CVE-2021-35592, CVE-2021-35593, CVE-2021-35594, CVE-2021-35596, CVE-2021-35598, CVE-2021-35602, CVE-2021-35604, CVE-2021-35607, CVE-2021-35608, CVE-2021-35610, CVE-2021-35612, CVE-2021-35613, CVE-2021-35618, CVE-2021-35621, CVE-2021-35622, CVE-2021-35623, CVE-2021-35624, CVE-2021-35625, CVE-2021-35626, CVE-2021-35627, CVE-2021-35628, CVE-2021-35629, CVE-2021-35630, CVE-2021-35631, CVE-2021-35632, CVE-2021-35633, CVE-2021-35634, CVE-2021-35635, CVE-2021-35636, CVE-2021-35637, CVE-2021-35638, CVE-2021-35639, CVE-2021-35640, CVE-2021-35641, CVE-2021-35642, CVE-2021-35643, CVE-2021-35644, CVE-2021-35645, CVE-2021-35646, CVE-2021-35647, CVE-2021-35648, CVE-2021-36222, CVE-2021-3711; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere; OnCommand Insight; OnCommand Workflow Automation; SnapCenter.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211022-0004/
NetApp published this interim advisory covering CVE-2021-3517, CVE-2021-35560, CVE-2021-35567, CVE-2021-35550, CVE-2021-3522, CVE-2021-35586, CVE-2021-35564, CVE-2021-35556, CVE-2021-35559, CVE-2021-35561, CVE-2021-35565, CVE-2021-35578, CVE-2021-35603, CVE-2021-35588; the API labels exploitation information as **Public**. The API currently lists affected products as: 7-Mode Transition Tool; Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere; Cloud Insights Acquisition Unit; Cloud Secure Agent; E-Series SANtricity OS Controller Software 11.x; E-Series SANtricity Storage Manager; E-Series SANtricity Unified Manager and Web Services Proxy; NetApp Cloud Backup (formerly AltaVault); NetApp HCI Compute Node (Bootstrap OS); NetApp SolidFire & HCI Management Node; OnCommand Insight; OnCommand Workflow Automation; SANtricity Storage Plugin for vCenter; SANtricity Unified Manager; SnapManager for Oracle; SnapManager for SAP; SolidFire Storage Replication Adapter.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211022-0001/
NetApp published this final advisory covering CVE-2021-36090, CVE-2021-35515, CVE-2021-35516, CVE-2021-35517; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Linux; Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere; Cloud Insights Acquisition Unit; OnCommand Insight.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211022-0005/
NetApp published this final advisory covering CVE-2021-35597; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211022-0002/
NetApp published this final advisory covering CVE-2021-20305; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; ONTAP Select Deploy administration utility.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211018-0001/
NetApp published this final advisory covering CVE-2021-27001; the API labels exploitation information as **Not public**. The API currently lists affected products as: Clustered Data ONTAP.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211014-0004/
NetApp published this interim advisory covering CVE-2021-41617; the API labels exploitation information as **Public**. The API currently lists affected products as: Brocade Fabric Operating System Firmware; FAS/AFF Baseboard Management Controller (BMC) - A250/500f/C250; NetApp Cloud Backup (formerly AltaVault); NetApp SolidFire & HCI Management Node; NetApp SolidFire Baseboard Management Controller (BMC); ONTAP 9 (formerly Clustered Data ONTAP); ONTAP Select Deploy administration utility.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211014-0003/
NetApp published this final advisory covering CVE-2021-41073; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211014-0001/
NetApp published this final advisory covering CVE-2021-25740; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211014-0002/
NetApp published this final advisory covering CVE-2020-8561; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211014-0005/
NetApp published this final advisory covering CVE-2016-20012; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211012-0001/
NetApp published this final advisory covering CVE-2021-27003; the API labels exploitation information as **Public**. The API currently lists affected products as: Clustered Data ONTAP.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211011-0001/
NetApp published this final advisory covering CVE-2021-27002; the API labels exploitation information as **Public**. The API currently lists affected products as: Cloud Manager.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211008-0004/
NetApp published this final advisory covering CVE-2021-34798, CVE-2021-36160, CVE-2021-39275, CVE-2021-40438; the API labels exploitation information as **Public**. The API currently lists affected products as: Brocade Fabric Operating System Firmware; NetApp Cloud Backup (formerly AltaVault); ONTAP 9; StorageGRID (formerly StorageGRID Webscale).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211008-0005/
NetApp published this final advisory covering CVE-2021-41079; the API labels exploitation information as **Public**. The API currently lists affected products as: Management Services for Element Software and NetApp HCI.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211008-0001/
NetApp published this final advisory covering CVE-2021-40839; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211008-0003/
NetApp published this final advisory covering CVE-2021-38300; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211008-0006/
NetApp published this final advisory covering CVE-2021-25741; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211008-0002/
NetApp published this final advisory covering CVE-2021-22147; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211004-0005/
NetApp published this final advisory covering CVE-2020-19143, CVE-2020-19144; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP Select Deploy administration utility.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211004-0001/
NetApp published this interim advisory covering CVE-2021-40490; the API labels exploitation information as **Public**. The API currently lists affected products as: FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400; FAS/AFF Baseboard Management Controller (BMC) - A250/500f/C250; NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Baseboard Management Controller (BMC) - H610C; NetApp HCI Baseboard Management Controller (BMC) - H610S; NetApp HCI Baseboard Management Controller (BMC) - H615C; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211004-0003/
NetApp published this final advisory covering CVE-2021-3634; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211004-0004/
NetApp published this final advisory covering CVE-2021-25737; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20211004-0002/
NetApp published this final advisory covering CVE-2018-16871; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210923-0002/
NetApp published this final advisory covering CVE-2021-37750; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210923-0006/
NetApp published this final advisory covering CVE-2021-3713; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210923-0004/
NetApp published this final advisory covering CVE-2021-29631; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210923-0005/
NetApp published this final advisory covering CVE-2021-29630; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210923-0003/
NetApp published this interim advisory covering CVE-2021-39139, CVE-2021-39140, CVE-2021-39141, CVE-2021-39144, CVE-2021-39145, CVE-2021-39146, CVE-2021-39147, CVE-2021-39148, CVE-2021-39149, CVE-2021-39150, CVE-2021-39151, CVE-2021-39152, CVE-2021-39153, CVE-2021-39154; the API labels exploitation information as **Public**. The API currently lists affected products as: SnapManager for Oracle; SnapManager for SAP.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210923-0001/
NetApp published this final advisory covering CVE-2021-22931, CVE-2021-22940; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210917-0005/
NetApp published this final advisory covering CVE-2021-37576; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210917-0004/
NetApp published this final advisory covering CVE-2021-33193; the API labels exploitation information as **Public**. The API currently lists affected products as: Brocade Fabric Operating System Firmware; NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210917-0001/
NetApp published this final advisory covering CVE-2021-31810; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210917-0002/
NetApp published this final advisory covering CVE-2021-30468; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210917-0003/
NetApp published this final advisory covering CVE-2021-22939; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210917-0006/
NetApp published this final advisory covering CVE-2020-5398; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Data Availability Services; SnapCenter.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210909-0005/
NetApp published this interim advisory covering CVE-2021-38604; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210909-0001/
NetApp published this interim advisory covering CVE-2021-38166; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H300E/H500E/H700E/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp SolidFire & HCI Management Node; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210909-0003/
NetApp published this final advisory covering CVE-2021-36770; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); ONTAP Select Deploy administration utility; Snap Creator Framework.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210909-0002/
NetApp published this final advisory covering CVE-2021-25218; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H300E/H500E/H700E/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210909-0004/
NetApp published this final advisory covering CVE-2020-22403; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210902-0001/
NetApp published this final advisory covering CVE-2021-32785, CVE-2021-32786; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210902-0007/
NetApp published this final advisory covering CVE-2021-38207; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210902-0002/
NetApp published this final advisory covering CVE-2021-37600; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP Select Deploy administration utility.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210902-0006/
NetApp published this final advisory covering CVE-2021-3682; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210902-0005/
NetApp published this final advisory covering CVE-2021-33195; the API labels exploitation information as **Public**. The API currently lists affected products as: Cloud Insights Telegraf Agent.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210902-0008/
NetApp published this final advisory covering CVE-2021-29657; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210902-0009/
NetApp published this final advisory covering CVE-2012-2666; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210902-0003/
NetApp published this interim advisory covering CVE-2021-22922, CVE-2021-22923, CVE-2021-22924, CVE-2021-22925, CVE-2021-22926; the API labels exploitation information as **Public**. The API currently lists affected products as: Clustered Data ONTAP; NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H300E/H500E/H700E/H410S; NetApp SolidFire & HCI Management Node; NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210902-0004/
NetApp published this final advisory covering CVE-2021-28966, CVE-2021-31799, CVE-2021-32066; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210902-0010/
NetApp published this interim advisory covering CVE-2021-38160, CVE-2021-38199, CVE-2021-38201, CVE-2021-38202, CVE-2021-38203; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Cloud Backup (formerly AltaVault); NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Baseboard Management Controller (BMC) - H610C; NetApp HCI Baseboard Management Controller (BMC) - H610S; NetApp HCI Baseboard Management Controller (BMC) - H615C; NetApp HCI Compute Node (Bootstrap OS); NetApp SolidFire & HCI Management Node; NetApp SolidFire & HCI Storage Node (Element Software); NetApp SolidFire Baseboard Management Controller (BMC).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210827-0006/
NetApp published this final advisory covering CVE-2021-22144, CVE-2021-22145; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20210827-0007/
NetApp published this final advisory covering CVE-2021-30639, CVE-2021-30640, CVE-2021-33037; the API labels exploitation information as **Public**. The API currently lists affected products as: Management Services for Element Software and NetApp HCI.
Open source