CVE-2013-3320

NetApp OnCommand System Manager prior to 2.2 is affected by CVE-2013-3320 (XSS) via the full-name and comment fields. The SEC Consult advisory indicates vulnerable versions are <= 2.1 and

PT-2020-7434

Name of the Vulnerable Software and Affected Versions: NetApp OnCommand System Manager versions prior to 2.2 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the full-name and comment fields, enabling Cross-site Scripting XSS attacks. Recommendations: For...

PT-2020-7435

Name of the Vulnerable Software and Affected Versions: NetApp OnCommand System Manager versions 2.1 and earlier Description: The issue allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter. This can b...

CVE-2013-3320: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject arbitrary web script or HTML via the 'full-name' and 'comment' fields...

CVE-2013-3321: Inclusion of Functionality from Untrusted Control Sphere

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter...

Deserialized Double Dirty

Recently I was able to fully root a NetApp OnCommand Performance Manager appliance using a Java Deserialization vulnerability and Dirty COW...

Missing HTTP Security Headers in NetApp OnCommand Workflow Automation - Lenovo Support US

No description provided...

Missing HTTP Security Headers in NetApp OnCommand Workflow Automation - US

Lenovo Security Advisory: LEN-29480 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5503 Summary Description: NetApp reported that OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers...

NetApp OnCommand Workflow Automation Information Disclosure Vulnerability

NetApp OnCommand Workflow Automation is a suite of storage process management software from American NetApp. The software provides storage configuration, storage cloning and other functions for the database or file system. An information disclosure vulnerability exists in NetApp OnCommand Workflo...

CVE-2019-5503

OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

CVE-2019-5503

OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

CVE-2019-5503

CVE-2019-5503 concerns NetApp OnCommand Workflow Automation. The affected product versions “prior to 5.0” allegedly shipped without certain HTTP security headers, potentially enabling information disclosure via unspecified vectors. The Red Hat/Lenovo entries confirm the same CVE description and r...

CVE-2019-5503: Cleartext Transmission of Sensitive Information

OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

PT-2019-17718

Name of the Vulnerable Software and Affected Versions OnCommand Workflow Automation versions prior to 5.0 Description The issue allows an attacker to obtain sensitive information via unspecified vectors due to the lack of certain HTTP Security headers. Recommendations For versions prior to 5.0,...

OnCommand Insight Information Disclosure Vulnerability

NetApp Oncommand Insight is a suite of hybrid cloud data center management software from US-based NetApp. The software provides monitoring and management of multi-vendor IT infrastructure, optimization of storage resource management and other functions. An information disclosure vulnerability...

CVE-2019-5498

OnCommand Insight versions through 7.3.6 may disclose sensitive account information to an authenticated user...

CVE-2019-5498

OnCommand Insight versions through 7.3.6 may disclose sensitive account information to an authenticated user...

Design/Logic Flaw

OnCommand Insight versions through 7.3.6 may disclose sensitive account information to an authenticated user...

CVE-2019-5498

OnCommand Insight up to version 7.3.6 contains an information-disclosure vulnerability that could reveal sensitive account information to an authenticated user. This is documented across multiple sources (NVD and Red Hat/CVE entries) with the root cause described as an issue in how the product ha...