CVE-2019-5495

2019-05-1019:12:23

netapp

www.cve.org

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

JSON

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

CNA Affected

[
  {
    "product": "OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above",
    "vendor": "NetApp",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to 9.5"
      }
    ]
  }
]

References

security.netapp.com/advisory/ntap-20190509-0007/