CVE-2021-22096: Netapp Active Iq Unified Manager

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.

Affected products

• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Management Services For Element Software And Netapp Hci: affected versions not specified
• Netapp Metrocluster Tiebreaker: affected versions not specified
• Netapp Snap Creator Framework: affected versions not specified
• Netapp Snapcenter: affected versions not specified
• Oracle Communications Cloud Native Core Console: version 1.9.0 only
• Oracle Communications Cloud Native Core Service Communication Proxy: version 1.15.0 only
• VMware Spring Framework: from 5.2.0, up to and including 5.2.17; from 5.3.0, up to and including 5.3.10

Published 2021-10-28. Last modified 2026-06-17.