[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fN3mR8g9bpJXYAthgcTnfm2ZXM7-Q6QzQnq2Zx-W5Gks":3,"g5a-ex:netapp\u002Fontap@*":116,"g5a-family:netapp\u002Fontap":118},{"success":4,"data":5},true,{"product":6,"versions":28,"topVulnerabilitiesByEpss":34,"kevVulnerabilities":93,"seoMetadata":94,"meta":113},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":27},"netapp","ontap",5,16,0,"2025-03-30",[14,18,21,23,25],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"9",14,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"9.12.1",1,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"9.13.1",{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},"9.14.1",{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},"9.15.1","Ontap by Netapp is a technology product with 5 tracked versions and 16 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[29,30,31,32,33],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},[35,43,49,53,60,65,70,76,81,86],{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":42},"CVE-2024-6387","A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.","2024-07-01",8.1,"v3.1","High",0.99506,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":48},"CVE-2024-27316","HTTP\u002F2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.","2024-04-04",7.5,0.91327,{"cveId":50,"description":51,"publishedDate":38,"cvssScore":47,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":52},"CVE-2024-39573","Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy.\nUsers are recommended to upgrade to version 2.4.60, which fixes this issue.",0.3718,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":40,"severity":58,"isKev":17,"epssScore":59},"CVE-2025-26465","A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.","2025-02-18",6.8,"Medium",0.07723,{"cveId":61,"description":62,"publishedDate":46,"cvssScore":63,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":64},"CVE-2023-38709","Faulty input validation in the core of Apache allows malicious or exploitable backend\u002Fcontent generators to split HTTP responses.\n\nThis issue affects Apache HTTP Server: through 2.4.58.",7.3,0.03914,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":47,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":69},"CVE-2024-28757","libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).","2024-03-10",0.02006,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":40,"severity":58,"isKev":17,"epssScore":75},"CVE-2023-27536","An authentication bypass vulnerability exists libcurl \u003C8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5\u002Fkerberos\u002Fnegotiate\u002FGSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.","2023-03-30",5.9,0.01758,{"cveId":77,"description":78,"publishedDate":38,"cvssScore":79,"cvssVersion":40,"severity":58,"isKev":17,"epssScore":80},"CVE-2024-36387","Serving WebSocket protocol upgrades over a HTTP\u002F2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.",5.4,0.01715,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":47,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":85},"CVE-2023-4408","The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers.\nThis issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.","2024-02-13",0.01338,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"cvssVersion":40,"severity":91,"isKev":17,"epssScore":92},"CVE-2024-8932","In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.","2024-11-22",9.8,"Critical",0.01275,[],{"title":95,"metaDescription":96,"keywords":97,"structuredData":98},"Ontap by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Ontap by Netapp covering 5 versions with 16 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Ontap vulnerabilities, Ontap security, Ontap CVE, Netapp Ontap, Ontap threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":99,"@type":100,"name":101,"description":96,"url":102,"manufacturer":103,"applicationCategory":107,"softwareVersion":108,"mainEntity":109},"https:\u002F\u002Fschema.org","SoftwareApplication","Ontap","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fontap",{"@type":104,"name":105,"url":106},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","5 versions tracked",{"@type":110,"name":111,"description":112,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Ontap Security Vulnerabilities","Security vulnerabilities affecting Ontap by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":114,"apiVersion":115},"2026-10-16T23:39:15.773Z","3.0",{"rows":117,"total":11,"capped":17,"failed":11},[],[119,122,125,128,131,133,136,138],{"product":120,"cves":121},"ontap_select_deploy_administration_utility",172,{"product":123,"cves":124},"ontap_tools",22,{"product":126,"cves":127},"ontap_select_deploy",8,{"product":129,"cves":130},"ontap_9",7,{"product":132,"cves":9},"ontap_antivirus_connector",{"product":134,"cves":135},"ontap_mediator",2,{"product":137,"cves":135},"ontap_system_manager",{"product":139,"cves":20},"ontap_select_deploy_utility"]