netapp oncommand unified manager for clustered data ontap vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 up to and including 6.4P1 contain a default privileged account, which allows remote malicious users to execute arbitrary code via unspecified vectors.

Netapp Oncommand Unified Manager For Clustered Data Ontap 6.4 Netapp Oncommand Unified Manager For Clustered Data Ontap 6.3

5

CVSSv2

NetApp OnCommand Unified Manager for Clustered Data ONTAP prior to 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote malicious users to capture this cookie by intercepting its transmission within an HTTP session.

Netapp Oncommand Unified Manager For Clustered Data Ontap

4.4

CVSSv2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks ...

5.1

CVSSv2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). Supported versions that are affected are Java SE: 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Jav...

Oracle Jdk 1.8.0 Oracle Jdk 1.7.0 Oracle Jre 1.7.0 Oracle Jre 1.8.0 Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Snapmanager -Netapp Oncommand Unified Manager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp E-series Santricity Storage Manager -Netapp Active Iq Unified Manager -Netapp Plug-in For Symantec Netbackup -Netapp E-series Santricity Os Controller Netapp Virtual Storage Console Netapp Storage Replication Adapter For Clustered Data Ontap Netapp Vasa Provider For Clustered Data Ontap

5.8

CVSSv2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Succ...

6.8

CVSSv2

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise ...

Oracle Jdk 1.8.0 Oracle Jdk 1.7.0 Oracle Jdk 1.6.0 Oracle Jre 1.6.0 Oracle Jre 1.7.0 Oracle Jre 1.8.0 Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Snapmanager -Netapp Oncommand Unified Manager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp E-series Santricity Storage Manager -Netapp Active Iq Unified Manager -Netapp Plug-in For Symantec Netbackup -Netapp E-series Santricity Os Controller Netapp Virtual Storage Console Netapp Storage Replication Adapter For Clustered Data Ontap Netapp Vasa Provider For Clustered Data Ontap

5

CVSSv2

NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP prior to 7.1P1 improperly bind the Java Management Extension Remote Method Invocation (aka JMX RMI) service to the network, which allows remote malicious users to obtain sensitive informat...

Netapp Clustered Data Ontap

6.8

CVSSv2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network ...

1 Article

5

CVSSv2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network acc...

2.1

CVSSv2

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthent...

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook