CVE-2019-5495: Undefined Security Weakness

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

PT-2019-17712

Name of the Vulnerable Software and Affected Versions OnCommand Unified Manager for VMware vSphere, Linux and Windows versions prior to 9.5 Description The issue allows an attacker to obtain sensitive information via unspecified vectors due to the lack of certain HTTP Security headers...

CVE-2019-5496: Cleartext Transmission of Sensitive Information

Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

CVE-2018-5481

CVE-2018-5481 affects OnCommand Unified Manager for 7-Mode (core package) prior to version 5.2.4, where cookies are set without the secure attribute in certain circumstances. This can enable impersonation via MITM attacks on network-accessible sessions. The vulnerability arises from cookie securi...

CVE-2018-5481

OnCommand Unified Manager for 7-Mode core package prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle MITM attacks...

Design/Logic Flaw

OnCommand Unified Manager for 7-Mode core package prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle MITM attacks...

CVE-2018-5481

OnCommand Unified Manager for 7-Mode core package prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle MITM attacks...

CVE-2018-5481

OnCommand Unified Manager for 7-Mode core package prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle MITM attacks...

PT-2019-10985

Name of the Vulnerable Software and Affected Versions: OnCommand Unified Manager for 7-Mode core package versions prior to 5.2.4 Description: The issue allows for impersonation via man-in-the-middle MITM attacks due to the lack of the secure attribute in cookies under certain circumstances...

CVE-2018-5481: Missing Encryption of Sensitive Data

OnCommand Unified Manager for 7-Mode core package prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle MITM attacks...

CVE-2017-13652

NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user interface...

Design/Logic Flaw

NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user interface...

CVE-2017-13652

NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user interface...

CVE-2017-13652

NetApp OnCommand Insight (affected: version 7.3.0 and versions prior to 7.2.0) is susceptible to clickjacking in its UI, which could cause a user to perform an unintended action. The description does not specify the underlying root cause or exact impact beyond this UI interaction risk, and no rem...

CVE-2017-13652

NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user interface...

CVE-2017-13652: Improper Input Validation

NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user interface...

PT-2018-5587

Name of the Vulnerable Software and Affected Versions: NetApp OnCommand Insight versions prior to 7.2.0 NetApp OnCommand Insight version 7.3.0 Description: The issue allows for clickjacking attacks, which could cause a user to perform an unintended action in the user interface. Recommendations: F...

CVE-2017-7568

NetApp OnCommand Unified Manager for 7-Mode core package versions prior to 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is tested via the user interface...

Authentication flaw

NetApp OnCommand Unified Manager for 7-Mode core package versions prior to 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is tested via the user interface...

CVE-2017-7568

NetApp OnCommand Unified Manager for 7-Mode (core package) prior to version 5.2.3 is affected. When LDAP authentication is tested via the UI, authenticated users may disclose sensitive LDAP account information. The issue exposes partial confidentiality and is tied to the LDAP testing flow in the ...