NetApp Data ONTAP 9

productDE

cpe:/a:netapp:data_ontap:9

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

8critical28high19medium2low

updated 2026-10-27

vulnerabilities (115)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-32463US	high7.8OT critical	55.5% (99th)	KEV	no fix	2025-06-30	—
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	no fix	2024-07-01	—
CVE-2023-38039US	high7.5	56.4% (99th)	Exploit	no fix	2023-09-15	—
CVE-2023-51385US	medium6.5	19.8% (97th)	Exploit	no fix	2023-12-18	—
CVE-2024-0760US	—	4.68% (92nd)	Exploit	no fix	2024-07-23	—
CVE-2026-4747US	—	3.43% (89th)	Exploit	no fix	2026-03-26	—
CVE-2024-28757US	high7.5	2.01% (81st)	Exploit	no fix	2024-03-10	—
CVE-2024-45490US	high7.5	1.69% (77th)	Exploit	no fix	2024-08-30	—
CVE-2024-22017US	—	0.89% (59th)	Exploit	no fix	2024-03-19	—
CVE-2025-1219US	medium5.3	0.75% (55th)	Exploit	no fix	2025-03-30	—
CVE-2024-2511US	—	52.4% (99th)	—	no fix	2024-04-08	—
CVE-2017-8923US	critical9.8	7.19% (94th)	—	no fix	2017-05-12	—
CVE-2024-8926US	high8.8	3.66% (90th)	—	no fix	2024-10-08	—
CVE-2024-22019US	high7.5	3.17% (88th)	—	no fix	2024-02-20	—
CVE-2023-27534US	high8.8	2.44% (84th)	—	no fix	2023-03-30	—
CVE-2024-8929US	—	2.24% (83rd)	—	no fix	2024-11-22	—
CVE-2023-27533US	high8.8	2.16% (82nd)	—	no fix	2023-03-30	—
CVE-2024-1975US	—	2.11% (82nd)	—	no fix	2024-07-23	—
CVE-2024-1737US	—	2.11% (82nd)	—	no fix	2024-07-23	—
CVE-2024-4076US	—	2.11% (82nd)	—	no fix	2024-07-23	—
CVE-2024-11236US	critical9.8	2.07% (81st)	—	no fix	2024-11-24	—
CVE-2022-2906US	high7.5	2.07% (81st)	—	no fix	2022-09-21	—
CVE-2024-24806US	high7.3	2.00% (81st)	—	no fix	2024-02-07	—
CVE-2024-11053US	—	1.97% (80th)	—	no fix	2024-12-11	—
CVE-2022-3080US	high7.5	1.95% (80th)	—	no fix	2022-09-21	—
CVE-2023-27537US	medium5.9	1.90% (80th)	—	no fix	2023-03-30	—
CVE-2024-2379US	—	1.86% (79th)	—	no fix	2024-03-27	—
CVE-2023-27535US	medium5.9	1.80% (78th)	—	no fix	2023-03-30	—
CVE-2023-27536US	medium5.9	1.76% (78th)	—	no fix	2023-03-30	—
CVE-2024-2004US	—OT elevated	1.68% (77th)	—	no fix	2024-03-27	—
CVE-2024-11233US	high8.2	1.61% (76th)	—	no fix	2024-11-24	—
CVE-2022-28331US	critical9.8	1.57% (75th)	—	no fix	2023-01-31	—
CVE-2025-49796US	—	1.56% (75th)	—	no fix	2025-06-16	—
CVE-2024-11235US	high8.1	1.48% (74th)	—	no fix	2025-04-04	—
CVE-2022-24963US	critical9.8	1.47% (74th)	—	no fix	2023-01-31	—
CVE-2023-0662US	high7.5	1.47% (74th)	—	no fix	2023-02-16	—
CVE-2025-9086US	—	1.46% (73rd)	—	no fix	2025-09-12	—
CVE-2024-2466US	—	1.45% (73rd)	—	no fix	2024-03-27	—
CVE-2023-27538US	medium5.5	1.45% (73rd)	—	no fix	2023-03-30	—
CVE-2022-2881US	high8.2	1.42% (73rd)	—	no fix	2022-09-21	—
CVE-2022-25147US	medium6.5	1.42% (73rd)	—	no fix	2023-01-31	—
CVE-2024-45492US	critical9.8	1.39% (72nd)	—	no fix	2024-08-30	—
CVE-2025-6021US	—	1.37% (72nd)	—	no fix	2025-06-12	—
CVE-2025-0665US	—	1.33% (71st)	—	no fix	2025-02-05	—
CVE-2024-22025US	—	1.31% (70th)	—	no fix	2024-03-19	—
CVE-2023-46809US	—	1.30% (70th)	—	no fix	2024-09-07	—
CVE-2023-5679US	—	1.29% (70th)	—	no fix	2024-02-13	—
CVE-2023-5517US	—	1.29% (70th)	—	no fix	2024-02-13	—
CVE-2024-8932US	—	1.27% (70th)	—	no fix	2024-11-22	—
CVE-2024-21896US	critical9.8	1.26% (69th)	—	no fix	2024-02-20	—

showing 50 of 115

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation11 CVEs
CWE-787Out-of-bounds Write11 CVEs
CWE-770Allocation of Resources Without Limits or Throttling10 CVEs
CWE-125Out-of-bounds Read9 CVEs
CWE-190Integer Overflow or Wraparound8 CVEs
CWE-400Uncontrolled Resource Consumption7 CVEs
CWE-416Use After Free6 CVEs
CWE-287Improper Authentication5 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)115 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan