CVE-2025-21587
CVE-2025-21587: 1 tracked advisory record across NetApp. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
NetApp
1 advisory- Advisory severityHigh7.4
High [CVE-2025-21587 +1] April 2025 Java Platform Standard Edition Vulnerabilities in NetApp Products
NTAP-20250502-0005Source published Source updated
This bulletin covers 2 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
Multiple NetApp products incorporate the Oracle Java Platform, Standard Edition (Java SE) software libraries. Certain Java SE (JDK and JRE) versions are susceptible to vulnerabilities that can result in in unauthorized read, update, insert, or delete access to some or all Oracle Java SE accessible data or a partial denial of service (partial DOS) of Oracle Java SE. Refer to “Oracle Critical Patch Update Advisory - April 2025” for specific version details. Insights Storage Workload Security Agent (formerly Cloud Insights Storage Workload Security Agent): Affected by only CVE-2025-21587. OnCommand Insight & NetApp BlueXP: NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. Affected products named by the advisory…
- Affected products in this advisory
- Active IQ Unified Manager for Microsoft Windows
- Active IQ Unified Manager for VMware vSphere
- Data Infrastructure Insights and Data Secure Storage Workload Security Agent
- NetApp Console Agent
3 more entries in the full advisory.
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- Active IQ Unified Manager for Microsoft Windows: 9.18
- Active IQ Unified Manager for VMware vSphere: 9.18
- NetApp Console Agent: 3.9.54
- Mitigation guidance
- Update affected NetApp products to a fixed release: Active IQ Unified Manager for Microsoft Windows: 9.18, Active IQ Unified Manager for VMware vSphere: 9.18, NetApp Console Agent: 3.9.54.
- NetApp HCI Compute Node (Bootstrap OS) has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
Android app · Google Play
Monitor future NetApp CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.