Netapp

CPE vendor key: netapp · 56 CVEs published in the last 24 months.

CVEs (365 d)

no change vs prior 30d

Avg CVSS (365 d)

5.63

over 6 CVEs

Avg EPSS pct (365 d)

0.17

higher = more likely exploited

KEV hit rate (365 d)

0.0%

0 of 6 added to CISA KEV

LLM-credited CVEs

none detected

Monthly CVE volume — last 24 months

Each point is one calendar month. Bars in the severity card to the right slice the same volume by CVSS band.

Severity mix

Stacked by CVSS band (Critical / High / Medium / Low) using the best available metric per CVE.

Top affected products (24 mo)

hci_compute_node

active_iq_unified_manager

ontap

bootstrap_os

h410s_firmware

h700s

h300s

h500s_firmware

h700s_firmware

h410s

Distinct CVEs that include each product in their CPE configuration.

Top CWEs (24 mo)

Distinct CVEs assigned each weakness.

Known exploited, all time (40)

Published	CVE
2025-03-11	CVE-2024-54085
2025-03-10	CVE-2025-24813
2025-01-25	CVE-2025-0411
2024-07-01	CVE-2024-38475
2024-01-31	CVE-2024-1086
2023-10-27	CVE-2023-46604
2023-10-10	CVE-2023-44487
2023-10-03	CVE-2023-4911
2023-09-21	CVE-2023-41993
2023-09-12	CVE-2023-4863
2023-04-25	CVE-2023-29552
2023-03-22	CVE-2023-0386
2022-03-25	CVE-2022-0995
2022-03-10	CVE-2022-0847
2022-03-03	CVE-2022-0492
2022-02-11	CVE-2022-0185
2022-01-26	CVE-2021-22600
2021-12-10	CVE-2021-44228
2021-10-07	CVE-2021-42013
2021-10-05	CVE-2021-41773
2021-09-16	CVE-2021-40438
2021-08-23	CVE-2021-39144
2021-07-07	CVE-2021-22555
2021-01-26	CVE-2021-3156
2020-11-03	CVE-2020-15999
2020-04-29	CVE-2020-11023
2020-02-24	CVE-2020-1938
2019-10-11	CVE-2019-2215
2019-07-17	CVE-2019-13272
2019-04-08	CVE-2019-0211
2018-09-25	CVE-2018-14634
2018-08-22	CVE-2018-11776
2017-10-04	CVE-2017-12617
2017-09-19	CVE-2017-12615
2017-09-15	CVE-2017-9805
2017-04-06	CVE-2016-8735
2017-03-11	CVE-2017-5638
2016-11-10	CVE-2016-5195
2016-04-21	CVE-2016-3427
2010-08-05	CVE-2010-1871

Attributed by CPE rather than by CISA's vendor name, so it includes CVEs filed under another vendor whose affected-product list names this one — shared library code is the usual reason. Broader, and noisier, than the name-matched card above on purpose.

Generated 16 October 2026 14:24 UTC .