Solidfire vulnerabilitiesAnd the versions its exploited flaws hit.
Solidfire is made by Netapp. We track 193 published vulnerabilities listed under that exact name, across 0 versions. 5 of them are on the list of flaws known to be exploited, the newest added on 6 October 2025. Netapp lists newer releases under their own names, such as Solidfire & Hci Management Node, so check those pages too.
The most recent Solidfire flaw added to the known-exploited list is CVE-2021-22555, on 6 October 2025. We keep watching the known-exploited list.
Is Solidfire listed under other names? Yes.
Netapp also lists Solidfire under more specific names, such as Solidfire & Hci Management Node and Solidfire Baseboard Management Controller. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
- Solidfire & Hci Management Node96 published vulnerabilities
- Solidfire Baseboard Management Controller86 published vulnerabilities
- Solidfire Baseboard Management Controller Firmware70 published vulnerabilities
- Solidfire & Hci Storage Node21 published vulnerabilities
- Solidfire BIOS16 published vulnerabilities
- Solidfire Element OS Management Node3 published vulnerabilities
- Solidfire Enterprise Sds3 published vulnerabilities
- Solidfire Element OS3 published vulnerabilities
Which versions of Solidfire do the exploited flaws hit?
Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.
Which Solidfire vulnerabilities are being exploited?
5 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.8Linux Kernel Heap Out-of-Bounds Write Vulnerability
Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.
- 7.8Sudo Heap-Based Buffer Overflow Vulnerability
Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.
- 7.0Linux Kernel Race Condition Vulnerability
Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.
- 7.8Linux Kernel Improper Privilege Management Vulnerability
Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.
- 7.8Android Kernel Use-After-Free Vulnerability
Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel.
Which Solidfire flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single...
- >99%CVE-2021-34429Medium
For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints.
- 98%CVE-2019-5736High
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command...
- 96%CVE-2022-2068High
In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found...
- 94%CVE-2017-5753Medium
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
- 88%CVE-2021-3711Critical
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt().
- 84%
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory...
- 82%CVE-2022-34169High
The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets.
- 79%
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.
- 78%CVE-2020-27223Medium
In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e.
Running Solidfire? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.
- Matched to
- Solidfire on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 193 published vulnerabilities listed under the name Solidfire, across 0 versions. The most recent Solidfire flaw added to the known-exploited list is CVE-2021-22555, on 6 October 2025.
5 are on the list of flaws known to be exploited. The most recently added are CVE-2021-22555, CVE-2021-3156 and CVE-2016-5195.
Netapp also lists Solidfire under more specific names, such as Solidfire & Hci Management Node and Solidfire Baseboard Management Controller. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Create a Precursor Intelligence account and track Solidfire. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.