CVE-2021-3541: Netapp Active Iq Unified Manager

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.

Affected products

• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Cloud Backup: affected versions not specified
• Netapp Clustered Data Ontap: affected versions not specified
• Netapp Clustered Data Ontap Antivirus Connector: affected versions not specified
• Netapp h300e Firmware: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500e Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700e Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Manageability Software Development Kit: affected versions not specified
• Netapp Ontap Select Deploy Administration Utility: affected versions not specified
• Netapp Smi-S Provider: affected versions not specified
• Netapp Snapdrive: affected versions not specified
• Oracle ZFS Storage Appliance Kit: version 8.8 only
• Red Hat JBoss Core Services: affected versions not specified
• Xmlsoft LIBXML2: before 2.9.11 (fixed in 2.9.11)

Published 2021-07-09. Last modified 2026-06-17.