CVE-2017-7345: Netapp Clustered Data Ontap

Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days.

NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind the Java Management Extension Remote Method Invocation (aka JMX RMI) service to the network, which allows remote attackers to obtain sensitive information via unspecified vectors.

Affected products

• Netapp Clustered Data Ontap: up to and including 7.1

Published 2017-04-10. Last modified 2026-06-17.