oncommand unified manager core package vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x prior to 5.2.2P1 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.

Netapp Oncommand Unified Manager Core Package 5.2.2 Netapp Oncommand Unified Manager Core Package 5.2 Netapp Oncommand Unified Manager Core Package 5.0.2 Netapp Oncommand Unified Manager Core Package 5.0.1 Netapp Oncommand Unified Manager Core Package 5.0 Netapp Oncommand Unified Manager Core Package 5.2.1 Netapp Oncommand Unified Manager Core Package 5.1

NetApp OnCommand Unified Manager Core Package 5.x prior to 5.2.2P1 might allow remote malicious users to obtain sensitive information via vectors involving error messages.

Netapp Oncommand Unified Manager Core Package 5.0.1 Netapp Oncommand Unified Manager Core Package 5.0 Netapp Oncommand Unified Manager Core Package 5.2.1 Netapp Oncommand Unified Manager Core Package 5.1 Netapp Oncommand Unified Manager Core Package 5.2.2 Netapp Oncommand Unified Manager Core Package 5.2 Netapp Oncommand Unified Manager Core Package 5.0.2

PuTTY prior to 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message.

Putty Putty Opensuse Leap 15.0 Opensuse Leap 15.1 Netapp Oncommand Unified Manager Core Package -

PuTTY 0.68 up to and including 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle malicious users to target initial connection attempts (where no host key for the server has been cached by the client).

Putty Putty Netapp Oncommand Unified Manager Core Package -Fedoraproject Fedora 31 Fedoraproject Fedora 32

OnCommand Unified Manager Core Package versions before 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link (plink).

Netapp Oncommand Unified Manager

OnCommand Unified Manager for 7-Mode (core package) before 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle (MITM) attacks.

Netapp Oncommand Unified Manager

NetApp OnCommand Unified Manager for 7-Mode (core package) versions before 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is tested via the user interface.

Netapp Oncommand Unified Manager

NetApp OnCommand Unified Manager for 7-mode (core package) versions before 5.2.1 are susceptible to a clickjacking or "UI redress attack" which could be used to cause a user to perform an unintended action in the user interface.

Netapp Oncommand Unified Manager

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.

Apache Xmlbeans Netapp Snap Creator Framework -Netapp Snapmanager -Netapp Oncommand Unified Manager Core Package -Debian Debian Linux 9.0 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Middleware Common Libraries And Tools 12.2.1.4.0 Oracle Middleware Common Libraries And Tools 12.2.1.3.0

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with net...

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook