327 matches found
CVE-2019-17276: Improper Neutralization of Input During Web Page Generation
OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow an authenticated attacker to inject arbitrary scripts into the SNMP Community Names label field...
NetApp OnCommand Cloud Manager Code Execution Vulnerability
NetApp OnCommand Cloud Manager is a suite of software from NetApp, Inc. that supports the deployment, management and tracking of Data Fabric resources across cloud environments. A security vulnerability exists in OnCommand Cloud Manager versions prior to 3.8.0. A remote attacker could exploit the...
CVE-2019-17275
OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers...
CVE-2019-17275
OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers...
Design/Logic Flaw
OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers...
CVE-2019-17275
The CVE-2019-17275 entry concerns NetApp OnCommand Cloud Manager, affected versions prior to 3.8.0. The vulnerability enables arbitrary code execution via remote attackers, with network access and no authentication required reported in sources. The risk is described as high/critical depending on ...
CVE-2019-17275
OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers...
PT-2020-9889
Name of the Vulnerable Software and Affected Versions OnCommand Cloud Manager versions prior to 3.8.0 Description The issue allows for arbitrary code execution by remote attackers. Recommendations For versions prior to 3.8.0, update to version 3.8.0 or later to resolve the issue...
CVE-2019-17275: Undefined Security Weakness
OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers...
CVE-2013-3322
NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to inject arbitrary commands in the Halt/Reboot interface...
CVE-2013-3322
CVE-2013-3322 affects NetApp OnCommand System Manager (versions <= 2.1 and
CVE-2013-3322: Improper Neutralization of Special Elements used in an OS Command
NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to inject arbitrary commands in the Halt/Reboot interface...
PT-2020-7436
Name of the Vulnerable Software and Affected Versions: NetApp OnCommand System Manager versions 2.1 and earlier Description: The issue allows remote attackers to inject arbitrary commands in the Halt/Reboot interface. Recommendations: For versions 2.1 and earlier, consider disabling the Halt/Rebo...
CVE-2013-3320
Cross-site Scripting XSS vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject arbitrary web script or HTML via the 'full-name' and 'comment' fields...
CVE-2013-3321
NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter...
Code injection
NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter...
Cross site scripting
Cross-site Scripting XSS vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject arbitrary web script or HTML via the 'full-name' and 'comment' fields...
CVE-2013-3321
NetApp OnCommand System Manager 2.1 and earlier is affected by CVE-2013-3321 via a Local File Inclusion path exposed in the SnapMirror log/diagnostic area. Exploitation requires authentication as root to change the diagnostic path and read arbitrary files from the file system. The vulnerability i...
CVE-2013-3321
NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter...