Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netapp oncommand unified manager 7.3 vulnerabilities and exploits

(subscribe to this query)
5.1
CVSSv2
CVE-2018-2825
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successf...
Oracle Jdk 10Oracle Jre 10Canonical Ubuntu Linux 18.04Netapp E-series Santricity Os ControllerNetapp Cloud Backup -Netapp Santricity Cloud Connector -Netapp Oncommand Unified ManagerNetapp Snapmanager -Netapp Oncommand Unified Manager -Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Oncommand Insight -Netapp Oncommand Unified Manager 7.3Netapp Virtual Storage ConsoleNetapp E-series Santricity Management -Netapp E-series Santricity Storage Manager -Netapp E-series Santricity Web Services -Netapp Storage Replication AdapterNetapp Vasa Provider
5.1
CVSSv2
CVE-2018-2826
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successf...
Oracle Jdk 10Oracle Jre 10Canonical Ubuntu Linux 18.04Netapp E-series Santricity Os ControllerNetapp Cloud Backup -Netapp Santricity Cloud Connector -Netapp Oncommand Unified ManagerNetapp Snapmanager -Netapp Oncommand Unified Manager -Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Oncommand Insight -Netapp Oncommand Unified Manager 7.3Netapp Virtual Storage ConsoleNetapp E-series Santricity Management -Netapp E-series Santricity Storage Manager -Netapp E-series Santricity Web Services -Netapp Storage Replication AdapterNetapp Vasa Provider
4.3
CVSSv2
CVE-2021-3629
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions before...
Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Wildfly CoreRedhat Integration -Redhat UndertowRedhat Jboss Enterprise Application Platform 7.4Redhat Jboss Enterprise Application Platform 7.3Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -
6.4
CVSSv2
CVE-2020-10719
A flaw was found in Undertow in versions prior to 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an malicious user to take advantage of HTTP request smuggling.
Redhat UndertowNetapp Oncommand InsightRedhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Fuse 1.0Redhat Jboss Enterprise Application Platform 7.3Redhat Jboss Enterprise Application Platform 7.4Redhat Jboss Enterprise Application Platform 7.2Netapp Oncommand Workflow Automation -Netapp Active Iq Unified Manager -
7.5
CVSSv2
CVE-2019-17267
A Polymorphic Typing issue exists in FasterXML jackson-databind prior to 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.
Fasterxml Jackson-databindNetapp Steelstore Cloud Integrated Storage -Netapp Oncommand Workflow Automation -Netapp Service Level Manager -Netapp Oncommand Api Services -Netapp Active Iq Unified ManagerDebian Debian Linux 8.0Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Oracle Weblogic Server 12.2.1.3.0Oracle Retail Customer Management And Segmentation Foundation 17.0Oracle Goldengate Application Adapters 19.1.0.0.0Oracle Customer Management And Segmentation Foundation
2.6
CVSSv2
CVE-2021-3597
A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions before 2.0.35.SP1, before 2.2.6.SP1, bef...
Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Fuse 1.0Redhat Undertow 2.0.39Redhat Undertow 2.2.9Redhat Undertow 2.0.36Redhat Undertow 2.2.7Redhat Undertow 2.2.6Redhat UndertowRedhat Undertow 2.0.35Redhat Jboss Enterprise Application Platform 7.3Redhat Jboss Enterprise Application Platform 7.4Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -
7.5
CVSSv2
CVE-2017-7657
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size coul...
Eclipse JettyDebian Debian Linux 9.0Netapp Oncommand Unified ManagerNetapp Element Software -Netapp Santricity Cloud Connector -Netapp Element Software Management Node -Netapp E-series Santricity Web Services -Netapp E-series Santricity Management -Netapp Hci Storage Nodes -Netapp E-series Santricity Os ControllerNetapp Oncommand System Manager 3.xNetapp Snap Creator FrameworkNetapp SnapcenterNetapp SnapmanagerHp Xp P9000 Command ViewOracle Retail Xstore Point Of Service 15.0Oracle Retail Xstore Point Of Service 7.1Oracle Retail Xstore Point Of Service 16.0Oracle Retail Xstore Point Of Service 17.0Oracle Rest Data Services 12.2.0.1Oracle Rest Data Services 12.1.0.2Oracle Rest Data Services 11.2.0.4
5
CVSSv2
CVE-2016-8743
Apache HTTP Server, in all releases before 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interac...
Apache Http ServerNetapp Clustered Data Ontap -Netapp Oncommand Unified Manager -Debian Debian Linux 8.0Debian Debian Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Server Tus 7.3Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Eus 7.3Redhat Enterprise Linux Eus 7.4Redhat Enterprise Linux Eus 7.5Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux Eus 7.6Redhat Enterprise Linux Server Aus 7.7Redhat Enterprise Linux Server Tus 7.7
4.6
CVSSv2
CVE-2018-5485
NetApp OnCommand Unified Manager for Windows versions 7.2 up to and including 7.3 are susceptible to a vulnerability which could lead to a privilege escalation attack.
Netapp Oncommand Unified Manager
4.6
CVSSv2
CVE-2018-5486
NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol (JDWP) enabled which allows unauthorized local malicious users to execute arbitrary code.
Netapp Oncommand Unified Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook