CVE-2021-27004: Netapp Ontap System Manager

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

System Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow a local attacker to discover plaintext iSCSI CHAP credentials.

Affected products

• Netapp Ontap System Manager: from 9.0, before 9.7 (fixed in 9.7); version 9.7 only; version 9.8 only; version 9.9.12 only

Published 2021-11-01. Last modified 2026-06-17.