CVE-2021-27003

4.7 mediumEPSS 0.6%

Medium (4.7) in netapp clustered data ontap. EPSS 0.6% chance of exploitation in the next 30 days.

Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack.

Severity

CVSS 3.1

4.7 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-1021
Published: 2021-10-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netapp:clustered_data_ontap

References

https://security.netapp.com/advisory/ntap-20211012-0001/
https://security.netapp.com/advisory/ntap-20211012-0001/

Check your stack JSON