CVE-2021-27001: Netapp Clustered Data Ontap

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an authenticated privileged local attacker to arbitrarily modify Compliance-mode WORM data prior to the end of the retention period.

Affected products

• Netapp Clustered Data Ontap: from 9.0, up to and including 9.4; version 9.5 only; version 9.6 only; version 9.7 only; version 9.8 only; version 9.9.1 only

Published 2021-10-19. Last modified 2026-06-17.