EUVD-2016-5998

Malware in sbrugna...

EUVD-2016-6000

Malware in sbrugna...

PT-2020-7436

Name of the Vulnerable Software and Affected Versions: NetApp OnCommand System Manager versions 2.1 and earlier Description: The issue allows remote attackers to inject arbitrary commands in the Halt/Reboot interface. Recommendations: For versions 2.1 and earlier, consider disabling the Halt/Rebo...

CVE-2013-3322: Improper Neutralization of Special Elements used in an OS Command

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to inject arbitrary commands in the Halt/Reboot interface...

CVE-2013-3320

NetApp OnCommand System Manager prior to 2.2 is affected by CVE-2013-3320 (XSS) via the full-name and comment fields. The SEC Consult advisory indicates vulnerable versions are <= 2.1 and

CVE-2013-3321: Inclusion of Functionality from Untrusted Control Sphere

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter...

PT-2020-7435

Name of the Vulnerable Software and Affected Versions: NetApp OnCommand System Manager versions 2.1 and earlier Description: The issue allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter. This can b...

PT-2020-7434

Name of the Vulnerable Software and Affected Versions: NetApp OnCommand System Manager versions prior to 2.2 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the full-name and comment fields, enabling Cross-site Scripting XSS attacks. Recommendations: For...

CVE-2013-3320: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject arbitrary web script or HTML via the 'full-name' and 'comment' fields...

CVE-2016-5045

NetApp OnCommand System Manager before 9.0 allows remote attackers to obtain sensitive credentials via vectors related to cluster peering setup...

CVE-2016-5045: Exposure of Sensitive Information to an Unauthorized Actor

NetApp OnCommand System Manager before 9.0 allows remote attackers to obtain sensitive credentials via vectors related to cluster peering setup...

PT-2017-8672

Name of the Vulnerable Software and Affected Versions NetApp OnCommand System Manager versions prior to 9.0 Description The issue allows remote attackers to obtain sensitive credentials. This is related to vectors involving cluster peering setup. Recommendations For versions prior to 9.0, update ...

CVE-2015-8322

NetApp OnCommand System Manager 8.3.x before 8.3.2 allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2016-3063

Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authenticated users to execute arbitrary API calls via unspecified vectors...

PT-2017-7395

Name of the Vulnerable Software and Affected Versions NetApp OnCommand System Manager versions 8.3.x before 8.3.2 Description The issue allows remote authenticated users to execute arbitrary code. Recommendations For versions 8.3.x before 8.3.2, update to version 8.3.2 or later to resolve the iss...

CVE-2015-8322: Undefined Security Weakness

NetApp OnCommand System Manager 8.3.x before 8.3.2 allows remote authenticated users to execute arbitrary code via unspecified vectors...

PT-2017-8320

Name of the Vulnerable Software and Affected Versions NetApp OnCommand System Manager versions prior to 8.3.2 Description The issue concerns multiple functions in the software that do not properly escape special characters. This allows remote authenticated users to execute arbitrary API calls,...

CVE-2016-3063: Improper Encoding or Escaping of Output

Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authenticated users to execute arbitrary API calls via unspecified vectors...

CVE-2016-5047: Undefined Security Weakness

NetApp OnCommand System Manager 8.3.x before 8.3.2P5 allows remote authenticated users to cause a denial of service via unspecified vectors...

PT-2016-6226

Name of the Vulnerable Software and Affected Versions NetApp OnCommand System Manager versions 8.3.x through 8.3.2P4 Description The issue allows remote authenticated users to cause a denial of service. Recommendations For versions 8.3.x through 8.3.2P4, update to version 8.3.2P5 or later to...