Clustered Data ONTAP Clickjacking Vulnerability

Clustered Data ONTAP is NetApp’s proprietary operating system for storage disk arrays.A clickjacking vulnerability exists in versions of Clustered Data ONTAP prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5, and 9.9.1. The vulnerability stems from the product’s lack of an X-Frame-Options header. An attacker could exploit this vulnerability to conduct a clickjacking attack.