Security Bulletin: Vulnerabilities in OpenSSL affect Data ONTAP SMI-S Agent，OnCommand Workflow Automation ，OnCommand Unified Manager Core Package (5.x)，Open Systems SnapVault Agent (CVE-2014-3513, CVE-2014-3567, CVE-2014-3568)

Summary OpenSSL vulnerabilities were disclosed on October 15, 2014 by the OpenSSL Project. OpenSSL is used by Data ONTAP SMI-S Agent，OnCommand Workflow Automation ，OnCommand Unified Manager Core Package 5.x，Open Systems SnapVault Agent. These products have addressed the applicable CVEs...

PT-2021-12798

Name of the Vulnerable Software and Affected Versions: OnCommand Unified Manager Core Package versions prior to 5.2.5 Description: The issue may disclose sensitive account information to unauthorized users via the use of PuTTY Link plink. Recommendations: For OnCommand Unified Manager Core Packag...

CVE-2020-8585: Improper Link Resolution Before File Access

OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link plink...

PT-2017-17598

Name of the Vulnerable Software and Affected Versions NetApp OnCommand Unified Manager Core Package versions prior to 5.2.2P1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 5.2.2P1, update to version 5.2.2P1 or...