Skip to content
VulniPulse

NetApp ONTAP tools for VMware Vulnerabilities & Security Advisories

30 advisories tracked · NetApp Product Security Advisories (PSIRT) · 0 listed in the CISA Known Exploited Vulnerabilities catalog

Every row below is a published NetApp advisory that VulniPulse classified as ONTAP tools for VMware, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 5 critical, 25 high, 1 medium.

Android app · Google Play

Monitor NetApp CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Source

NetApp Product Security Advisories (PSIRT)

Polled through NetApp Product Security's official advisory API. It supplies the canonical NTAP advisory ID, NetApp-calculated CVSS, affected and investigating products, remediation releases, workarounds and revision dates without relying on a third-party keyword search.

Latest NetApp ONTAP tools for VMware advisories

Critical9.8NetApp

Critical [CVE-2025-68263] Linux Kernel Vulnerability in NetApp Products

Multiple NetApp products incorporate Linux kernel. Certain versions of Linux kernel are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Affected products: ONTAP Select Deploy administration utility, ONTAP tools for VMware vSphere 10. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.

CVE-2025-68263
ONTAP tools for VMwareONTAP Select
Apr 24, 2026
Critical9.8NetApp

Critical [CVE-2025-37924] Linux Kernel Vulnerability in NetApp Products

Multiple NetApp products incorporate Linux kernel. Certain versions of Linux kernel versions are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Affected products: ONTAP Select Deploy administration utility, ONTAP tools for VMware vSphere 10. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.

CVE-2025-37924
ONTAP tools for VMwareONTAP Select
Apr 24, 2026
Critical9.1NetApp

Critical [CVE-2026-33186] gRPC-Go Vulnerability in NetApp Products

Multiple NetApp products incorporate gRPC-Go. gRPC-Go versions prior to 1.79.3 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information or addition or modification of data. Affected products: ONTAP tools for VMware vSphere 10. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.

CVE-2026-33186
ONTAP tools for VMware
Apr 22, 2026
Critical9.8NetApp

Critical [CVE-2026-31402] Linux Kernel Vulnerability in NetApp Products

Multiple NetApp products incorporate Linux kernel. Certain Linux kernel versions are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). Affected products: ONTAP tools for VMware vSphere 10. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.

CVE-2026-31402
ONTAP tools for VMware
Apr 17, 2026
Critical9.1NetApp

Critical [CVE-2024-47685] Linux Kernel Vulnerability in NetApp Products

Multiple NetApp products incorporate Linux kernel. Certain versions of Linux kernels are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information or Denial of Service (DoS). Affected products: Active IQ Unified Manager for VMware vSphere, E-Series SANtricity OS Controller Software, NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S, NetApp HCI Baseboard Management Controller (BMC) - H410C, NetApp HCI Compute Node (Bootstrap OS), NetApp SolidFire & HCI Management Node, NetApp SolidFire & HCI Storage Node (Element Software), ONTAP Select Deploy administration utility, ONTAP tools for VMware vSphere 10, SnapCenter Plug-in for VMware vSphere, StorageGRID (formerly StorageGRID Webscale), StorageGRID Baseboard Management Controller (BMC) - SG6060/SGF6024/SG100/SG1000, StorageGRID Baseboard Management Controller (BMC) - SG6160/SGF6112/SG110/SG1100.

CVE-2024-47685
AFF / ASA / FASStorageGRIDSANtricityElement Software
Jun 13, 2025

← All NetApp advisories