CVE-2019-5504: Netapp Ontap Select Deploy Administration Utility

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions.

Affected products

• Netapp Ontap Select Deploy Administration Utility: version 2.12 only; version 2.12.1 only

Published 2019-09-24. Last modified 2026-06-17.