netapp oncommand unified manager vulnerabilities and exploits

(subscribe to this query)

NetApp OnCommand Unified Manager Core Package 5.x prior to 5.2.2P1 might allow remote malicious users to obtain sensitive information via vectors involving error messages.

Netapp Oncommand Unified Manager Core Package 5.0 Netapp Oncommand Unified Manager Core Package 5.0.1 Netapp Oncommand Unified Manager Core Package 5.0.2 Netapp Oncommand Unified Manager Core Package 5.1 Netapp Oncommand Unified Manager Core Package 5.2 Netapp Oncommand Unified Manager Core Package 5.2.1 Netapp Oncommand Unified Manager Core Package 5.2.2

SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x prior to 5.2.2P1 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.

Netapp Oncommand Unified Manager Core Package 5.0 Netapp Oncommand Unified Manager Core Package 5.0.1 Netapp Oncommand Unified Manager Core Package 5.0.2 Netapp Oncommand Unified Manager Core Package 5.1 Netapp Oncommand Unified Manager Core Package 5.2 Netapp Oncommand Unified Manager Core Package 5.2.1 Netapp Oncommand Unified Manager Core Package 5.2.2

OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which could allow an malicious user to obtain sensitive information via unspecified vectors.

Netapp Oncommand Unified Manager

OnCommand Unified Manager for VMware vSphere, Linux and Windows before 9.5 shipped without certain HTTP Security headers configured which could allow an malicious user to obtain sensitive information via unspecified vectors.

Netapp Oncommand Unified Manager

OnCommand Unified Manager for 7-Mode (core package) before 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle (MITM) attacks.

Netapp Oncommand Unified Manager

NetApp OnCommand Unified Manager for Windows versions 7.2 up to and including 7.3 are susceptible to a vulnerability which could lead to a privilege escalation attack.

Netapp Oncommand Unified Manager

NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol (JDWP) enabled which allows unauthorized local malicious users to execute arbitrary code.

Netapp Oncommand Unified Manager

NetApp OnCommand Unified Manager for Linux versions 7.2 up to and including 7.3 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service bound to the network, and are susceptible to unauthenticated remote code execution.

Netapp Oncommand Unified Manager

NetApp OnCommand Unified Manager for 7-Mode (core package) versions before 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is tested via the user interface.

Netapp Oncommand Unified Manager

OnCommand Unified Manager Core Package versions before 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link (plink).

Netapp Oncommand Unified Manager

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook