CVE-2019-17276: Improper Neutralization of Input During Web Page Generation

OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow an authenticated attacker to inject arbitrary scripts into the SNMP Community Names label field...

NetApp OnCommand Cloud Manager Code Execution Vulnerability

NetApp OnCommand Cloud Manager is a suite of software from NetApp, Inc. that supports the deployment, management and tracking of Data Fabric resources across cloud environments. A security vulnerability exists in OnCommand Cloud Manager versions prior to 3.8.0. A remote attacker could exploit the...

CVE-2019-17275

OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers...

CVE-2019-17275

OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers...

Design/Logic Flaw

OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers...

CVE-2019-17275

The CVE-2019-17275 entry concerns NetApp OnCommand Cloud Manager, affected versions prior to 3.8.0. The vulnerability enables arbitrary code execution via remote attackers, with network access and no authentication required reported in sources. The risk is described as high/critical depending on ...

CVE-2019-17275

OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers...

PT-2020-9889

Name of the Vulnerable Software and Affected Versions OnCommand Cloud Manager versions prior to 3.8.0 Description The issue allows for arbitrary code execution by remote attackers. Recommendations For versions prior to 3.8.0, update to version 3.8.0 or later to resolve the issue...

CVE-2019-17275: Undefined Security Weakness

OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers...

CVE-2013-3322

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to inject arbitrary commands in the Halt/Reboot interface...

CVE-2013-3322

CVE-2013-3322 affects NetApp OnCommand System Manager (versions <= 2.1 and

CVE-2013-3322: Improper Neutralization of Special Elements used in an OS Command

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to inject arbitrary commands in the Halt/Reboot interface...

PT-2020-7436

Name of the Vulnerable Software and Affected Versions: NetApp OnCommand System Manager versions 2.1 and earlier Description: The issue allows remote attackers to inject arbitrary commands in the Halt/Reboot interface. Recommendations: For versions 2.1 and earlier, consider disabling the Halt/Rebo...

CVE-2013-3320

Cross-site Scripting XSS vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject arbitrary web script or HTML via the 'full-name' and 'comment' fields...

CVE-2013-3321

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter...

Code injection

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter...

Cross site scripting

Cross-site Scripting XSS vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject arbitrary web script or HTML via the 'full-name' and 'comment' fields...

CVE-2013-3321

NetApp OnCommand System Manager 2.1 and earlier is affected by CVE-2013-3321 via a Local File Inclusion path exposed in the SnapMirror log/diagnostic area. Exploitation requires authentication as root to change the diagnostic path and read arbitrary files from the file system. The vulnerability i...

CVE-2013-3321

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter...

CVE-2013-3320

NetApp OnCommand System Manager prior to 2.2 is affected by CVE-2013-3320 (XSS) via the full-name and comment fields. The SEC Consult advisory indicates vulnerable versions are <= 2.1 and