CVE-2021-26999

4.3 mediumEPSS 0.6%

Medium (4.3) in netapp cloud manager. EPSS 0.6% chance of exploitation in the next 30 days.

NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory connection fails. The logged information is available only to authenticated users. Customers with auto-upgrade enabled should already be on a fixed version while customers using on-prem connectors with auto-upgrade disabled are advised to upgrade to a fixed version.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2021-08-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netapp:cloud_manager

References

https://security.netapp.com/advisory/NTAP-20210805-0012
https://security.netapp.com/advisory/NTAP-20210805-0012

Check your stack JSON