# Netapp vulnerabilities

> Netapp has 2,458 published vulnerabilities across 395 products in our catalogue. 38 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Oncommand Insight, with 959. If you run Netapp software, patch the exploited flaws first.

Canonical page: https://www.edgeprotect.io/vendors/netapp

## At a glance

- **Published vulnerabilities:** 2,458
- **Known to be exploited:** 38
- **Products:** 395
- **Versions:** 584
- **Most recently added to the known-exploited list:** [CVE-2022-0492](https://www.edgeprotect.io/what-is/cve-2022-0492), 2 June 2026. We keep watching the list.

## Which Netapp products have the most vulnerabilities?

- [Oncommand Insight](https://www.edgeprotect.io/product/netapp/oncommand_insight): 959 published vulnerabilities, 30 versions
- [Active Iq Unified Manager](https://www.edgeprotect.io/product/netapp/active_iq_unified_manager): 827 published vulnerabilities, 5 versions
- [Oncommand Workflow Automation](https://www.edgeprotect.io/product/netapp/oncommand_workflow_automation): 734 published vulnerabilities, 10 versions
- [Snapcenter](https://www.edgeprotect.io/product/netapp/snapcenter): 566 published vulnerabilities, 24 versions
- [Cloud Backup](https://www.edgeprotect.io/product/netapp/cloud_backup): 345 published vulnerabilities, 0 versions
- [H500s](https://www.edgeprotect.io/product/netapp/h500s): 299 published vulnerabilities, 0 versions
- [H700s](https://www.edgeprotect.io/product/netapp/h700s): 299 published vulnerabilities, 0 versions
- [H410s](https://www.edgeprotect.io/product/netapp/h410s): 298 published vulnerabilities, 0 versions
- [H300s](https://www.edgeprotect.io/product/netapp/h300s): 297 published vulnerabilities, 0 versions
- [H700s Firmware](https://www.edgeprotect.io/product/netapp/h700s_firmware): 274 published vulnerabilities, 0 versions

Each product page lists its own known-exploited flaws.

## Which Netapp vulnerabilities are being exploited?

38 flaws are on the government list of vulnerabilities known to be exploited, newest first:

- [CVE-2022-0492](https://www.edgeprotect.io/what-is/cve-2022-0492): Linux Kernel Improper Authentication Vulnerability. High, CVSS 7.8, chance of use in 30 days 5.5%, known exploited since 2 June 2026.
- [CVE-2018-14634](https://www.edgeprotect.io/what-is/cve-2018-14634): Linux Kernel Integer Overflow Vulnerability. High, CVSS 7.8, chance of use in 30 days 15%, known exploited since 26 January 2026.
- [CVE-2021-22555](https://www.edgeprotect.io/what-is/cve-2021-22555): Linux Kernel Heap Out-of-Bounds Write Vulnerability. High, CVSS 7.8, chance of use in 30 days 79%, known exploited since 6 October 2025.
- [CVE-2024-54085](https://www.edgeprotect.io/what-is/cve-2024-54085): AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 61%, known exploited since 25 June 2025.
- [CVE-2024-38475](https://www.edgeprotect.io/what-is/cve-2024-38475): Apache HTTP Server Improper Escaping of Output Vulnerability. Critical, CVSS 9.1, chance of use in 30 days >99%, known exploited since 1 May 2025.
- [CVE-2025-24813](https://www.edgeprotect.io/what-is/cve-2025-24813): Apache Tomcat Path Equivalence Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 1 April 2025.
- [CVE-2025-0411](https://www.edgeprotect.io/what-is/cve-2025-0411): 7-Zip Mark of the Web Bypass Vulnerability. High, CVSS 7.0, chance of use in 30 days 67%, known exploited since 6 February 2025.
- [CVE-2020-11023](https://www.edgeprotect.io/what-is/cve-2020-11023): JQuery Cross-Site Scripting (XSS) Vulnerability. Medium, CVSS 6.9, chance of use in 30 days 84%, known exploited since 23 January 2025.
- [CVE-2022-0185](https://www.edgeprotect.io/what-is/cve-2022-0185): Linux Kernel Heap-Based Buffer Overflow Vulnerability. High, CVSS 8.4, chance of use in 30 days 25%, known exploited since 21 August 2024.
- [CVE-2024-1086](https://www.edgeprotect.io/what-is/cve-2024-1086): Linux Kernel Use-After-Free Vulnerability. High, CVSS 7.8, chance of use in 30 days 28%, known exploited since 30 May 2024.
- [CVE-2023-4911](https://www.edgeprotect.io/what-is/cve-2023-4911): GNU C Library Buffer Overflow Vulnerability. High, CVSS 7.8, chance of use in 30 days 81%, known exploited since 21 November 2023.
- [CVE-2023-29552](https://www.edgeprotect.io/what-is/cve-2023-29552): Service Location Protocol (SLP) Denial-of-Service Vulnerability. High, CVSS 7.5, chance of use in 30 days 66%, known exploited since 8 November 2023.
- [CVE-2023-46604](https://www.edgeprotect.io/what-is/cve-2023-46604): Apache ActiveMQ Deserialization of Untrusted Data Vulnerability. Critical, CVSS 10.0, chance of use in 30 days >99%, known exploited since 2 November 2023.
- [CVE-2023-44487](https://www.edgeprotect.io/what-is/cve-2023-44487): HTTP/2 Rapid Reset Attack Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 10 October 2023.
- [CVE-2023-41993](https://www.edgeprotect.io/what-is/cve-2023-41993): Apple Multiple Products WebKit Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 29%, known exploited since 25 September 2023.
- [CVE-2023-4863](https://www.edgeprotect.io/what-is/cve-2023-4863): Google Chromium WebP Heap-Based Buffer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days >99%, known exploited since 13 September 2023.
- [CVE-2016-8735](https://www.edgeprotect.io/what-is/cve-2016-8735): Apache Tomcat Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 90%, known exploited since 12 May 2023.
- [CVE-2016-3427](https://www.edgeprotect.io/what-is/cve-2016-3427): Oracle Java SE and JRockit Unspecified Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 92%, known exploited since 12 May 2023.
- [CVE-2021-39144](https://www.edgeprotect.io/what-is/cve-2021-39144): XStream Remote Code Execution Vulnerability. High, CVSS 8.5, chance of use in 30 days 98%, known exploited since 10 March 2023.
- [CVE-2022-0847](https://www.edgeprotect.io/what-is/cve-2022-0847): Linux Kernel Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 88%, known exploited since 25 April 2022.
- [CVE-2021-22600](https://www.edgeprotect.io/what-is/cve-2021-22600): Linux Kernel Privilege Escalation Vulnerability. Medium, CVSS 6.6, chance of use in 30 days 5.9%, known exploited since 11 April 2022.
- [CVE-2021-3156](https://www.edgeprotect.io/what-is/cve-2021-3156): Sudo Heap-Based Buffer Overflow Vulnerability. High, CVSS 7.8, chance of use in 30 days >99%, known exploited since 6 April 2022.
- [CVE-2017-12615](https://www.edgeprotect.io/what-is/cve-2017-12615): Apache Tomcat on Windows Remote Code Execution Vulnerability. High, CVSS 8.1, chance of use in 30 days >99%, known exploited since 25 March 2022.
- [CVE-2017-12617](https://www.edgeprotect.io/what-is/cve-2017-12617): Apache Tomcat Remote Code Execution Vulnerability. High, CVSS 8.1, chance of use in 30 days >99%, known exploited since 25 March 2022.
- [CVE-2020-1938](https://www.edgeprotect.io/what-is/cve-2020-1938): Apache Tomcat Improper Privilege Management Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 March 2022.
- [CVE-2016-5195](https://www.edgeprotect.io/what-is/cve-2016-5195): Linux Kernel Race Condition Vulnerability. High, CVSS 7.0, chance of use in 30 days 84%, known exploited since 3 March 2022.
- [CVE-2021-44228](https://www.edgeprotect.io/what-is/cve-2021-44228): Apache Log4j2 Remote Code Execution Vulnerability. Critical, CVSS 10.0, chance of use in 30 days >99%, known exploited since 10 December 2021.
- [CVE-2010-1871](https://www.edgeprotect.io/what-is/cve-2010-1871): Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 83%, known exploited since 10 December 2021.
- [CVE-2019-13272](https://www.edgeprotect.io/what-is/cve-2019-13272): Linux Kernel Improper Privilege Management Vulnerability. High, CVSS 7.8, chance of use in 30 days 52%, known exploited since 10 December 2021.
- [CVE-2021-40438](https://www.edgeprotect.io/what-is/cve-2021-40438): Apache HTTP Server-Side Request Forgery (SSRF). Critical, CVSS 9.0, chance of use in 30 days >99%, known exploited since 1 December 2021.
- [CVE-2017-5638](https://www.edgeprotect.io/what-is/cve-2017-5638): Apache Struts Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 November 2021.
- [CVE-2021-42013](https://www.edgeprotect.io/what-is/cve-2021-42013): Apache HTTP Server Path Traversal Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 November 2021.
- [CVE-2020-15999](https://www.edgeprotect.io/what-is/cve-2020-15999): Google Chrome FreeType Heap Buffer Overflow Vulnerability. Critical, CVSS 9.6, chance of use in 30 days 51%, known exploited since 3 November 2021.
- [CVE-2017-9805](https://www.edgeprotect.io/what-is/cve-2017-9805): Apache Struts Deserialization of Untrusted Data Vulnerability. High, CVSS 8.1, chance of use in 30 days >99%, known exploited since 3 November 2021.
- [CVE-2018-11776](https://www.edgeprotect.io/what-is/cve-2018-11776): Apache Struts Remote Code Execution Vulnerability. High, CVSS 8.1, chance of use in 30 days >99%, known exploited since 3 November 2021.
- [CVE-2019-0211](https://www.edgeprotect.io/what-is/cve-2019-0211): Apache HTTP Server Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 65%, known exploited since 3 November 2021.
- [CVE-2019-2215](https://www.edgeprotect.io/what-is/cve-2019-2215): Android Kernel Use-After-Free Vulnerability. High, CVSS 7.8, chance of use in 30 days 72%, known exploited since 3 November 2021.
- [CVE-2021-41773](https://www.edgeprotect.io/what-is/cve-2021-41773): Apache HTTP Server Path Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 3 November 2021.

## Which Netapp flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days):

- [CVE-2017-5638](https://www.edgeprotect.io/what-is/cve-2017-5638): >99%, Critical (CVSS 9.8), known exploited
- [CVE-2018-11776](https://www.edgeprotect.io/what-is/cve-2018-11776): >99%, High (CVSS 8.1), known exploited
- [CVE-2017-12617](https://www.edgeprotect.io/what-is/cve-2017-12617): >99%, High (CVSS 8.1), known exploited
- [CVE-2020-13379](https://www.edgeprotect.io/what-is/cve-2020-13379): >99%, High (CVSS 8.2)
- [CVE-2017-12615](https://www.edgeprotect.io/what-is/cve-2017-12615): >99%, High (CVSS 8.1), known exploited
- [CVE-2017-9805](https://www.edgeprotect.io/what-is/cve-2017-9805): >99%, High (CVSS 8.1), known exploited
- [CVE-2020-1938](https://www.edgeprotect.io/what-is/cve-2020-1938): >99%, Critical (CVSS 9.8), known exploited
- [CVE-2020-11022](https://www.edgeprotect.io/what-is/cve-2020-11022): >99%, Medium (CVSS 6.1)
- [CVE-2019-5736](https://www.edgeprotect.io/what-is/cve-2019-5736): 99%, High (CVSS 8.6)

## All Netapp products we track

62 products with at least one tracked version, most vulnerabilities first:

- [Oncommand Insight](https://www.edgeprotect.io/product/netapp/oncommand_insight): 959 vulnerabilities, 30 versions
- [Active Iq Unified Manager](https://www.edgeprotect.io/product/netapp/active_iq_unified_manager): 827 vulnerabilities, 5 versions
- [Oncommand Workflow Automation](https://www.edgeprotect.io/product/netapp/oncommand_workflow_automation): 734 vulnerabilities, 10 versions
- [Snapcenter](https://www.edgeprotect.io/product/netapp/snapcenter): 566 vulnerabilities, 24 versions
- [E-Series Santricity OS Controller](https://www.edgeprotect.io/product/netapp/e-series_santricity_os_controller): 242 vulnerabilities, 20 versions
- [Clustered Data Ontap](https://www.edgeprotect.io/product/netapp/clustered_data_ontap): 190 vulnerabilities, 41 versions
- [Snapmanager](https://www.edgeprotect.io/product/netapp/snapmanager): 180 vulnerabilities, 11 versions
- [Ontap Select Deploy Administration Utility](https://www.edgeprotect.io/product/netapp/ontap_select_deploy_administration_utility): 172 vulnerabilities, 11 versions
- [Oncommand Unified Manager](https://www.edgeprotect.io/product/netapp/oncommand_unified_manager): 169 vulnerabilities, 14 versions
- Solidfire & Hci Management Node: 96 vulnerabilities, 1 version
- [Oncommand Balance](https://www.edgeprotect.io/product/netapp/oncommand_balance): 83 vulnerabilities, 1 version
- [7-Mode Transition Tool](https://www.edgeprotect.io/product/netapp/7-mode_transition_tool): 75 vulnerabilities, 14 versions
- [Storagegrid](https://www.edgeprotect.io/product/netapp/storagegrid): 72 vulnerabilities, 74 versions
- [Virtual Storage Console](https://www.edgeprotect.io/product/netapp/virtual_storage_console): 70 vulnerabilities, 6 versions
- [Vasa Provider for Clustered Data Ontap](https://www.edgeprotect.io/product/netapp/vasa_provider_for_clustered_data_ontap): 69 vulnerabilities, 5 versions
- [Oncommand Shift](https://www.edgeprotect.io/product/netapp/oncommand_shift): 63 vulnerabilities, 1 version
- [Storage Replication Adapter for Clustered Data Ontap](https://www.edgeprotect.io/product/netapp/storage_replication_adapter_for_clustered_data_ontap): 63 vulnerabilities, 3 versions
- [Data Ontap](https://www.edgeprotect.io/product/netapp/data_ontap): 42 vulnerabilities, 24 versions
- [Snap Creator Framework](https://www.edgeprotect.io/product/netapp/snap_creator_framework): 42 vulnerabilities, 8 versions
- [Hci Baseboard Management Controller](https://www.edgeprotect.io/product/netapp/hci_baseboard_management_controller): 33 vulnerabilities, 11 versions
- [Service Level Manager](https://www.edgeprotect.io/product/netapp/service_level_manager): 29 vulnerabilities, 4 versions
- [Oncommand System Manager](https://www.edgeprotect.io/product/netapp/oncommand_system_manager): 27 vulnerabilities, 15 versions
- [Snapcenter Server](https://www.edgeprotect.io/product/netapp/snapcenter_server): 23 vulnerabilities, 9 versions
- [Ontap Tools](https://www.edgeprotect.io/product/netapp/ontap_tools): 22 vulnerabilities, 2 versions
- [Oncommand API Services](https://www.edgeprotect.io/product/netapp/oncommand_api_services): 19 vulnerabilities, 6 versions
- [Cloud Manager](https://www.edgeprotect.io/product/netapp/cloud_manager): 19 vulnerabilities, 44 versions
- [Snapdrive](https://www.edgeprotect.io/product/netapp/snapdrive): 18 vulnerabilities, 13 versions
- [Aff A700s Firmware](https://www.edgeprotect.io/product/netapp/aff_a700s_firmware): 18 vulnerabilities, 1 version
- [Aff Baseboard Management Controller](https://www.edgeprotect.io/product/netapp/aff_baseboard_management_controller): 17 vulnerabilities, 3 versions
- [Management Services for Element Software and Netapp Hci](https://www.edgeprotect.io/product/netapp/management_services_for_element_software_and_netapp_hci): 17 vulnerabilities, 1 version
- [Ontap](https://www.edgeprotect.io/product/netapp/ontap): 16 vulnerabilities, 5 versions
- [Hci](https://www.edgeprotect.io/product/netapp/hci): 16 vulnerabilities, 4 versions
- [Service Processor](https://www.edgeprotect.io/product/netapp/service_processor): 13 vulnerabilities, 18 versions
- [Vasa Provider](https://www.edgeprotect.io/product/netapp/vasa_provider): 11 vulnerabilities, 3 versions
- [Oncommand Unified Manager Core Package](https://www.edgeprotect.io/product/netapp/oncommand_unified_manager_core_package): 11 vulnerabilities, 9 versions
- [Santricity Web Services Proxy](https://www.edgeprotect.io/product/netapp/santricity_web_services_proxy): 7 vulnerabilities, 2 versions
- [Steelstore](https://www.edgeprotect.io/product/netapp/steelstore): 6 vulnerabilities, 5 versions
- [Storagegrid Webscale](https://www.edgeprotect.io/product/netapp/storagegrid_webscale): 6 vulnerabilities, 8 versions
- [Storage Replication Adapter](https://www.edgeprotect.io/product/netapp/storage_replication_adapter): 6 vulnerabilities, 3 versions
- [Snapcenter Plug-in](https://www.edgeprotect.io/product/netapp/snapcenter_plug-in): 5 vulnerabilities, 2 versions
- [Virtual Storage Console for Vmware Vsphere](https://www.edgeprotect.io/product/netapp/virtual_storage_console_for_vmware_vsphere): 4 vulnerabilities, 2 versions
- [Element OS](https://www.edgeprotect.io/product/netapp/element_os): 4 vulnerabilities, 33 versions
- [Oncommand Unified Manager for Clustered Data Ontap](https://www.edgeprotect.io/product/netapp/oncommand_unified_manager_for_clustered_data_ontap): 4 vulnerabilities, 3 versions
- [Fas Baseboard Management Controller](https://www.edgeprotect.io/product/netapp/fas_baseboard_management_controller): 3 vulnerabilities, 2 versions
- [Fabric-Attached Storage 8300 Firmware](https://www.edgeprotect.io/product/netapp/fabric-attached_storage_8300_firmware): 3 vulnerabilities, 1 version
- [Fabric-Attached Storage 8700 Firmware](https://www.edgeprotect.io/product/netapp/fabric-attached_storage_8700_firmware): 3 vulnerabilities, 1 version
- [Metrocluster Tiebreaker](https://www.edgeprotect.io/product/netapp/metrocluster_tiebreaker): 3 vulnerabilities, 1 version
- [Altavault](https://www.edgeprotect.io/product/netapp/altavault): 3 vulnerabilities, 14 versions
- [Storage Replication Adapter for Clustered Data Ontap for Vmware Vsphere](https://www.edgeprotect.io/product/netapp/storage_replication_adapter_for_clustered_data_ontap_for_vmware_vsphere): 3 vulnerabilities, 1 version
- [All Flash Fabric-Attached Storage A400 Firmware](https://www.edgeprotect.io/product/netapp/all_flash_fabric-attached_storage_a400_firmware): 2 vulnerabilities, 1 version
- [Oncommand Cloud Manager](https://www.edgeprotect.io/product/netapp/oncommand_cloud_manager): 2 vulnerabilities, 20 versions
- [Windows Host Utilities](https://www.edgeprotect.io/product/netapp/windows_host_utilities): 2 vulnerabilities, 8 versions
- [Ontap System Manager](https://www.edgeprotect.io/product/netapp/ontap_system_manager): 2 vulnerabilities, 4 versions
- [System Manager](https://www.edgeprotect.io/product/netapp/system_manager): 2 vulnerabilities, 3 versions
- [Hyper Converged Infrastructure Compute Node](https://www.edgeprotect.io/product/netapp/hyper_converged_infrastructure_compute_node): 1 vulnerability, 1 version
- [Netapp Plug-in](https://www.edgeprotect.io/product/netapp/netapp_plug-in): 1 vulnerability, 1 version
- [Altavault Ost Plug-in](https://www.edgeprotect.io/product/netapp/altavault_ost_plug-in): 1 vulnerability, 5 versions
- [Element Healthtools](https://www.edgeprotect.io/product/netapp/element_healthtools): 1 vulnerability, 1 version
- [Santricity Storage Manager](https://www.edgeprotect.io/product/netapp/santricity_storage_manager): 1 vulnerability, 3 versions
- [Oncommand Unified Manger](https://www.edgeprotect.io/product/netapp/oncommand_unified_manger): 0 vulnerabilities, 4 versions
- [OS Controller](https://www.edgeprotect.io/product/netapp/os_controller): 0 vulnerabilities, 3 versions
- [Data Ontap Dsm for Windows Mpio](https://www.edgeprotect.io/product/netapp/data_ontap_dsm_for_windows_mpio): 0 vulnerabilities, 1 version

## Questions

### How many vulnerabilities does Netapp have?

Our catalogue lists 2,458 published vulnerabilities across 395 products and 584 versions from Netapp. The most recent Netapp flaw added to the known-exploited list is CVE-2022-0492, on 2 June 2026.

### Which Netapp vulnerabilities are being exploited?

38 Netapp vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2022-0492, CVE-2018-14634 and CVE-2021-22555. The full list is on this page.

### Which Netapp product has the most vulnerabilities?

Oncommand Insight, with 959 published vulnerabilities. Its own page lists the ones known to be exploited.

### How do I get alerts for new Netapp vulnerabilities?

Create a EdgeProtect account and track the Netapp products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

## Running Netapp?

EdgeProtect keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.edgeprotect.io/register
Book a demo: https://www.edgeprotect.io/contact