- How many CVEs does Netapp have?
- Netapp has 2,519 published CVE records since 2007, including 44 in the last two years.
- How many Netapp CVEs are in CISA KEV?
- Yes — 39 of Netapp's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which Netapp products have the most CVEs?
- The Netapp products with the most published CVEs are OnCommand Insight, active_iq_unified_manager, OnCommand Workflow Automation, SnapCenter, cloud backup.
- What are the most common weakness types in Netapp CVEs?
- Netapp's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-400 (Uncontrolled Resource Consumption), CWE-502 (Deserialization of Untrusted Data), CWE-787 (Out-of-bounds Write).
- Are there public exploits for Netapp vulnerabilities?
- Yes — 288 of Netapp's CVEs have a known public exploit.
- How many critical Netapp vulnerabilities are there?
- Netapp has 246 critical and 835 high-severity CVEs.
- What is the average severity of Netapp CVEs?
- The average CVSS base score across Netapp's scored CVEs is 6.5.