VYPR
← All advisories
Medium severity4.7NVD Advisory· Published Oct 12, 2021· Updated Jun 17, 2026

CVE-2021-27003

CVE-2021-27003

Description

Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack.

Affected products

18
  • NetApp/Clustered Data Ontap17 versions
    cpe:2.3:o:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:o:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*range: <9.5
    • cpe:2.3:o:netapp:clustered_data_ontap:9.5:-:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.5:p12:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.5:p13:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.5:p6:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.5:p8:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.5:p9:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.6:-:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.6:p1:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.6:p3:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.6:p4:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.6:p7:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.6:p8:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.7:-:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.7:p12:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.8:-:*:*:*:*:*:*
    • (no CPE)range: <9.5P18, <9.6P15, <9.7P14, <9.8P5, <9.9.1
  • ONTAP/Clustered Data ONTAPdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.