NetApp SolidFire / Element / HCI Vulnerabilities & Security Advisories
217 advisories tracked · NetApp Product Security Advisories (PSIRT) · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published NetApp advisory that VulniPulse classified as SolidFire / Element / HCI, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 15 critical, 81 high, 113 medium, 9 low.
Android app · Google Play
Monitor NetApp CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
NetApp Product Security Advisories (PSIRT)
Polled through NetApp Product Security's official advisory API. It supplies the canonical NTAP advisory ID, NetApp-calculated CVSS, affected and investigating products, remediation releases, workarounds and revision dates without relying on a third-party keyword search.
Latest NetApp SolidFire / Element / HCI advisories
High [CVE-2025-1179] GNU Binutils Vulnerability in NetApp Products
Multiple NetApp products incorporate GNU Binutils. GNU Binutils versions through 2.43 is susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Affected products: Active IQ Unified Manager for VMware vSphere, NetApp HCI Compute Node (Bootstrap OS). NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
High [CVE-2025-4802] GNU C Library (glibc) Vulnerability in NetApp Products
Multiple NetApp products incorporate GNU C Library. GNU C Library versions 2.27 through 2.38 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Affected products: Active IQ Unified Manager for VMware vSphere, Brocade Fabric Operating System Firmware, NetApp HCI Baseboard Management Controller (BMC) - H610S, NetApp HCI Compute Node (Bootstrap OS). NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
High [CVE-2024-56406] Perl Vulnerability in NetApp Products
Multiple NetApp products incorporate Perl. Perl versions 5.33.1 through 5.38.3, 5.39.0 through 5.40.1, and 5.41.0 through 5.41.10 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Affected products: NetApp HCI Compute Node (Bootstrap OS). NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
High [CVE-2025-32414] Libxml2 Vulnerability in NetApp Products
Multiple NetApp products incorporate libxml2. libxml2 versions prior to 2.13.8 and 2.14.x prior to 2.14.2 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: Active IQ Unified Manager for VMware vSphere, NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S, NetApp HCI Baseboard Management Controller (BMC) - H410C, NetApp HCI Compute Node (Bootstrap OS), SnapManager for Hyper-V. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
High [CVE-2025-32415] Libxml2 Vulnerability in NetApp Products
Multiple NetApp products incorporate libxml2. Libxml2 versions prior to 2.13.8 and 2.14.0 prior to 2.14.2 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: Active IQ Unified Manager for VMware vSphere, NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S, NetApp HCI Baseboard Management Controller (BMC) - H410C, NetApp HCI Compute Node (Bootstrap OS), NetApp Manageability SDK, ONTAP 9, SnapManager for Hyper-V. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
High [CVE-2025-31650] Apache Tomcat Vulnerability in NetApp Products
Multiple NetApp products incorporate Apache Tomcat. Apache Tomcat versions 9.0.76 through 9.0.102, 10.1.10 through 10.1.39, and 11.0.0-M2 through 11.0.5 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Compute Node (Bootstrap OS). NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
High [CVE-2025-40775] ISC Bind Vulnerability in NetApp Products
Multiple NetApp products incorporate ISC Bind. ISC Bind versions 9.20.0 through 9.20.8 and 9.21.0 through 9.21.7 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Compute Node (Bootstrap OS). NetApp states there is no workaround available at this time.
High [CVE-2025-0624] Grub2 Vulnerability in NetApp Products
Multiple NetApp products incorporate Grub2. Grub2 versions through 2.12 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Affected products: Active IQ Unified Manager for VMware vSphere, NetApp HCI Compute Node (Bootstrap OS). NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
High [CVE-2025-21587 +1] April 2025 Java Platform Standard Edition Vulnerabilities in NetApp Products
Multiple NetApp products incorporate the Oracle Java Platform, Standard Edition (Java SE) software libraries. Certain Java SE (JDK and JRE) versions are susceptible to vulnerabilities that can result in in unauthorized read, update, insert, or delete access to some or all Oracle Java SE accessible data or a partial denial of service (partial DOS) of Oracle Java SE. Refer to “Oracle Critical Patch Update Advisory - April 2025” for specific version details. Insights Storage Workload Security Agent (formerly Cloud Insights Storage Workload Security Agent): Affected by only CVE-2025-21587. OnCommand Insight & NetApp BlueXP: NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. Affected products named by the advisory: Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere; Data Infrastructure Insights and Data Secure Storage Workload Security Agent; NetApp Console Agent; and 2 more. Affected products named by the advisory: NetApp HCI Compute Node (Bootstrap OS); ONTAP tools for VMware vSphere 10.
High [CVE-2024-9287] Python Vulnerability in NetApp Products
Multiple NetApp products incorporate Python. Certain versions of Python are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Affected products: Active IQ Unified Manager for Microsoft Windows, NetApp HCI Compute Node (Bootstrap OS), ONTAP 9. NetApp states there is no workaround available at this time.
High [CVE-2024-56171] Libxml2 Vulnerability in NetApp Products
Multiple NetApp products incorporate libxml2. Libxml2 versions prior to 2.12.10 and 2.13.0 prior to 2.13.6 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Affected products: Active IQ Unified Manager for VMware vSphere, NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S, NetApp HCI Baseboard Management Controller (BMC) - H410C, NetApp HCI Compute Node (Bootstrap OS), NetApp Manageability SDK, NetApp SolidFire & HCI Management Node, NetApp SolidFire & HCI Storage Node (Element Software), ONTAP 9, SnapManager for Hyper-V. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
High [CVE-2025-24928] Libxml2 Vulnerability in NetApp Products
Multiple NetApp products incorporate libxml2. libxml2 versions prior to 2.12.10 and 2.13.x prior to 2.13.6 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). ONTAP 9: Exploitable only by authorized users. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time. Affected products named by the advisory: Active IQ Unified Manager for VMware vSphere; NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS); and 3 more. Affected products named by the advisory: NetApp Manageability SDK; NetApp SolidFire & HCI Management Node; SnapManager for Hyper-V.
High [CVE-2024-35896] Linux Kernel Vulnerability in NetApp Products
Multiple NetApp products incorporate Linux kernel. Certain Linux kernel versions are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Affected products: FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400, NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S, NetApp HCI Baseboard Management Controller (BMC) - H410C, NetApp HCI Baseboard Management Controller (BMC) - H610C, NetApp HCI Baseboard Management Controller (BMC) - H610S, NetApp HCI Baseboard Management Controller (BMC) - H615C, NetApp HCI Compute Node (Bootstrap OS), NetApp SolidFire & HCI Storage Node (Element Software), ONTAP tools for VMware vSphere 10. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
High [CVE-2024-35894] Linux Kernel Vulnerability in NetApp Products
Multiple NetApp products incorporate Linux kernel. Linux kernel versions 6.7 prior to 6.8.5 and prior to 6.9 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S, NetApp HCI Baseboard Management Controller (BMC) - H410C, NetApp HCI Compute Node (Bootstrap OS). NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
High [CVE-2025-0725] Libcurl Vulnerability in NetApp Products
Multiple NetApp products incorporate Libcurl. Libcurl versions 7.10.5 through 8.11.1 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S, NetApp HCI Baseboard Management Controller (BMC) - H410C, NetApp HCI Baseboard Management Controller (BMC) - H610C, NetApp HCI Baseboard Management Controller (BMC) - H610S, NetApp HCI Baseboard Management Controller (BMC) - H615C, NetApp HCI Compute Node (Bootstrap OS), NetApp SolidFire & HCI Management Node, NetApp SolidFire & HCI Storage Node (Element Software). NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
High [CVE-2025-27113] Libxml2 Vulnerability in NetApp Products
Multiple NetApp products incorporate Libxml2. Libxml2 versions prior to 2.12.10 and 2.13.0 prior to 2.13.6 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: Active IQ Unified Manager for VMware vSphere, NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S, NetApp HCI Baseboard Management Controller (BMC) - H410C, NetApp HCI Compute Node (Bootstrap OS), NetApp Manageability SDK, NetApp SolidFire & HCI Management Node, NetApp SolidFire & HCI Storage Node (Element Software), ONTAP 9, SnapManager for Hyper-V. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
High [CVE-2025-0306] Ruby Vulnerability in NetApp Products
Multiple NetApp products incorporate Ruby. All Ruby versions are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data. Affected products: NetApp HCI Compute Node (Bootstrap OS). NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
High [CVE-2024-26882] Linux Kernel Vulnerability in NetApp Products
Multiple NetApp products incorporate Linux kernel. Certain versions of the Linux Kernel are susceptible to a vulnerability which when successfully exploited could lead to disclosure sensitive information, addition or modification of data, or Denial of Service (DoS). Affected products: AFF/ASA/FAS Baseboard Management Controller (BMC) - A1K/A90/A70/C80/FAS90/FAS70, AFF/ASA/FAS Baseboard Management Controller (BMC) - A50/A30/A20/C60/C30/FAS50, FAS/AFF Baseboard Management Controller (BMC) - A320, FAS/AFF Baseboard Management Controller (BMC) - A900/9500, FAS/AFF Baseboard Management Controller (BMC) - FAS2820, NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S, NetApp HCI Baseboard Management Controller (BMC) - H410C, NetApp HCI Baseboard Management Controller (BMC) - H610C, NetApp HCI Baseboard Management Controller (BMC) - H610S, NetApp HCI Baseboard Management Controller (BMC) - H615C, NetApp HCI Compute Node (Bootstrap OS), ONTAP Select Deploy administration utility, ONTAP tools for VMware vSphere 10. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
High [CVE-2023-43804] urllib3 Vulnerability in NetApp Products
Multiple NetApp products incorporate urllib3. Urllib3 versions prior to 1.26.17 and prior to 2.0.6 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information or addition or modification of data. Affected products: Active IQ Unified Manager for VMware vSphere, NetApp SolidFire & HCI Storage Node (Element Software), ONTAP Mediator. NetApp states there is no workaround available at this time.
High [CVE-2023-31486] Perl Vulnerability in NetApp Products
Multiple NetApp products incorporate Perl. Perl versions prior to 5.38.0 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Affected products: Active IQ Unified Manager for VMware vSphere, NetApp HCI Compute Node (Bootstrap OS), ONTAP Select Deploy administration utility, OnCommand Workflow Automation. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.