Vulnerabilities fixed in NetApp Active IQ

NetApp has fixed several vulnerabilities in Active IQ. The vulnerabilities allow an unauthenticated remote malicious person to remote may be able to launch attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Access to sensitive data NetApp has...

NetApp Active IQ Unified Manager Denial of Service Vulnerability

NetApp Active IQ Unified Manager is an ONTAP storage product monitoring and management solution from US-based NetApp. The product supports features such as performance monitoring and secret key management. A security vulnerability exists in NetApp Active IQ Unified Manager VMware vSphere and...

NetApp Active IQ Unified Manager Code Execution Vulnerability

NetApp Active IQ Unified Manager is an ONTAP storage product monitoring and management solution from US-based NetApp. The product supports features such as performance monitoring and secret key management. A security vulnerability exists in NetApp Active IQ Unified Manager versions prior to 9.6 J...

CVE-2020-8574

Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation JMX RMI service enabled allowing unauthorized code execution to local users...

CVE-2020-8574

Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation JMX RMI service enabled allowing unauthorized code execution to local users...

CVE-2020-8575

Active IQ Unified Manager for VMware vSphere and Windows versions prior to 9.5 are susceptible to a vulnerability which allows administrative users to cause Denial of Service DoS...

Design/Logic Flaw

Active IQ Unified Manager for VMware vSphere and Windows versions prior to 9.5 are susceptible to a vulnerability which allows administrative users to cause Denial of Service DoS...

CVE-2020-8574

CVE-2020-8574 affects NetApp Active IQ Unified Manager for Linux prior to 9.6, where the Java Management Extensions (JMX) RMI service is enabled, enabling unauthorized code execution by local users. The connected sources confirm the issue is tied to the pre-9.6 Linux builds and describe local acc...

CVE-2020-8574

Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation JMX RMI service enabled allowing unauthorized code execution to local users...

CVE-2020-8575

Active IQ Unified Manager for VMware vSphere and Windows versions prior to 9.5 are susceptible to a vulnerability which allows administrative users to cause Denial of Service DoS...

CVE-2020-8575

CVE-2020-8575 affects NetApp Active IQ Unified Manager for VMware vSphere and Windows prior to 9.5. Multiple connected documents (Red Hat, CNVD, CVE lists) consistently describe a vulnerability that allows administrative users to cause Denial of Service (DoS). The precise root cause, vulnerable c...

FasterXML Jackson-databind CVE-2019-16943 Remote Code Execution Vulnerability

Description FasterXML Jackson-databind is prone to a remote-code execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. FasterXML jackson-databi...