Product by NetApp
NETAPP ONTAP 9
25 known vulnerabilities in NETAPP ONTAP 9 (NetApp), 0 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-6387 | Openssh: regresshion - race condition in ssh allows rce/dos | 8.1 | |
| High | CVE-2024-38473 | Apache HTTP Server proxy encoding problem | 8.1 | |
| High | CVE-2024-38472 | Apache HTTP Server on WIndows UNC SSRF | 7.5 | |
| High | CVE-2024-27316 | Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames | 7.5 | |
| High | CVE-2024-39573 | Apache HTTP Server: mod_rewrite proxy handler substitution | 7.5 | |
| Medium | CVE-2025-26465 | Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled | 6.8 | |
| High | CVE-2023-38709 | Apache HTTP Server: HTTP response splitting | 7.3 | |
| Medium | CVE-2024-24795 | Apache HTTP Server: HTTP Response Splitting in multiple modules | 6.3 | |
| Critical | CVE-2024-8932 | OOB access in ldap_escape | 9.8 | |
| High | CVE-2024-28757 | libexpat Project libexpat: security vulnerability | 7.5 | |
| Low | CVE-2024-11053 | netrc and redirect credential leak | 3.4 | |
| Critical | CVE-2025-1861 | Stream HTTP wrapper truncates redirect location to 1024 bytes | 9.8 | |
| High | CVE-2023-4408 | Parsing large DNS messages may cause excessive CPU load | 7.5 | |
| Critical | CVE-2024-56171 | XMLSoft libxml2: Use After Free | 7.8 | |
| High | CVE-2026-22049 | NETAPP ONTAP 9: Authentication Bypass Using an Alternate Path or Channel | 8.8 | |
| Medium | CVE-2023-27536 | Https://github.com/curl/curl: Authentication Bypass by Primary Weakness | 5.9 | |
| Medium | CVE-2024-36387 | Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2 | 5.4 | |
| Low | CVE-2024-2004 | Usage of disabled protocol | 3.5 | |
| High | CVE-2025-1736 | Stream HTTP wrapper header check might omit basic auth header | 7.3 | |
| High | CVE-2025-24928 | XMLSoft libxml2: Stack-based Buffer Overflow | 7.8 | |
| Medium | CVE-2025-1734 | Streams HTTP wrapper does not fail for headers with invalid name and no colon | 5.3 | |
| Medium | CVE-2026-22050 | NETAPP ONTAP 9: security vulnerability | 4.3 | |
| Low | CVE-2025-0167 | netrc and default credential leak | 3.4 | |
| Medium | CVE-2026-22052 | NETAPP ONTAP 9: Information Disclosure | 4.3 | |
| Medium | CVE-2023-27317 | Information Disclosure Vulnerability in ONTAP 9 | 4.3 |