CVE-2021-27005: Netapp Ontap System Manager

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allow a remote attacker to cause a crash of the httpd server.

Affected products

• Netapp Ontap System Manager: from 9.0, before 9.7 (fixed in 9.7); version 9.7 only; version 9.8 only; version 9.9.12 only

Published 2021-11-01. Last modified 2026-06-17.