CVE-2017-5988

CVE-2017-5988 affects NetApp Clustered Data ONTAP 8.1–9.1P1 when NFS/SMB are enabled; remote attackers can cause a denial of service via unspecified vectors. Underlying cause and specific exploit details are not provided in the supplied documents; remediation/patch information is not included.

CVE-2017-7345: Exposure of Sensitive Information to an Unauthorized Actor

NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind the Java Management Extension Remote Method Invocation aka JMX RMI service to the network, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2017-5988: Undefined Security Weakness

NetApp Clustered Data ONTAP 8.1 through 9.1P1, when NFS or SMB is enabled, allows remote attackers to cause a denial of service via unspecified vectors...

NetApp OnCommUnified Manager for Clustered Data ONTAP Arbitrary Code Execution Vulnerability

NetApp OnCommand System Manager is a suite of storage management tools from the American company NetApp. NetApp OnCommand Unified Manager for Clustered Data ONTAP versions 6.3-6.4p1 include a default privileged account for unified management that allows remote attackers to execute arbitrary code...

CVE-2016-6667

NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors...

Code injection

NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors...

Information disclosure

NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors...

CVE-2016-4341

NetApp Clustered Data ONTAP prior to version 8.3.2P7 is affected by CVE-2016-4341. The vulnerability allows remote attackers to obtain SMB share information via unspecified vectors, implying an information-disclosure risk. The issue affects ONTAP in the clustering (clustered) deployment and is mi...

CVE-2016-6667

NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2016-6667

Affected product and version : NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1. Vulnerability : presence of a default privileged account that enables remote attackers to execute arbitrary code via unspecified vectors. Impact : high-severity remote code execution with p...

CVE-2016-6667: Undefined Security Weakness

NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2016-4341: Exposure of Sensitive Information to an Unauthorized Actor

NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors...

CVE-2015-8020

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

Information disclosure

MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated user...

Information disclosure

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

CVE-2016-6820

MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated user...

CVE-2016-6820

The CVE-2016-6820 entry describes an information-disclosure vulnerability in NetApp MetroCluster Tiebreaker for clustered Data ONTAP, affecting versions before 1.2. The underlying issue allows an unauthenticated user to view sensitive data in cleartext. Connected records corroborate that NetApp M...

CVE-2015-8020

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

CVE-2015-8020

CVE-2015-8020 affects NetApp Clustered Data ONTAP (versions 8.0, 8.3.1, 8.3.2). The flaw is a default privileged account that can be used under certain conditions for unauthorized information disclosure. The connected documents confirm the existence of a privileged-account credential issue in Clu...

CVE-2015-8020: Exposure of Sensitive Information to an Unauthorized Actor

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...