116 matches found
PT-2020-7434
Name of the Vulnerable Software and Affected Versions: NetApp OnCommand System Manager versions prior to 2.2 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the full-name and comment fields, enabling Cross-site Scripting XSS attacks. Recommendations: For...
PT-2020-7435
Name of the Vulnerable Software and Affected Versions: NetApp OnCommand System Manager versions 2.1 and earlier Description: The issue allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter. This can b...
CVE-2013-3321: Inclusion of Functionality from Untrusted Control Sphere
NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter...
CVE-2013-3320: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject arbitrary web script or HTML via the 'full-name' and 'comment' fields...
Missing HTTP Security Headers in NetApp OnCommand Workflow Automation - Lenovo Support US
No description provided...
OnCommand Insight Information Disclosure Vulnerability
NetApp Oncommand Insight is a suite of hybrid cloud data center management software from US-based NetApp. The software provides monitoring and management of multi-vendor IT infrastructure, optimization of storage resource management and other functions. An information disclosure vulnerability...
Design/Logic Flaw
NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user interface...
CVE-2017-13652: Improper Input Validation
NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user interface...
PT-2018-5587
Name of the Vulnerable Software and Affected Versions: NetApp OnCommand Insight versions prior to 7.2.0 NetApp OnCommand Insight version 7.3.0 Description: The issue allows for clickjacking attacks, which could cause a user to perform an unintended action in the user interface. Recommendations: F...
PT-2018-8408
Name of the Vulnerable Software and Affected Versions NetApp OnCommand Unified Manager for 7-Mode core package versions prior to 5.2.3 Description The issue may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is tested via the user...
CVE-2017-7568: Exposure of Sensitive Information to an Unauthorized Actor
NetApp OnCommand Unified Manager for 7-Mode core package versions prior to 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is tested via the user interface...
NetApp OnCommand Unified Manager for Windows Elevation of Privilege Vulnerability
NetApp OnCommand Unified Manager for Windows is a set of Windows-based ONTAP system management software from the U.S. company NetApp. The software can simplify data management, monitoring storage system infrastructure and detect faults. An elevation of privilege vulnerability exists in NetApp...
CVE-2018-5485
NetApp OnCommand Unified Manager for Windows versions 7.2 through 7.3 are susceptible to a vulnerability which could lead to a privilege escalation attack...
CVE-2018-5487
NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management Extension Remote Method Invocation JMX RMI service bound to the network, and are susceptible to unauthenticated remote code execution...
Privilege escalation
NetApp OnCommand Unified Manager for Windows versions 7.2 through 7.3 are susceptible to a vulnerability which could lead to a privilege escalation attack...
CVE-2018-5487: Improper Input Validation
NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management Extension Remote Method Invocation JMX RMI service bound to the network, and are susceptible to unauthenticated remote code execution...
PT-2018-16985
Name of the Vulnerable Software and Affected Versions NetApp OnCommand Unified Manager for Windows versions 7.2 through 7.3 Description The issue could lead to a privilege escalation attack. Recommendations For versions 7.2 through 7.3, update to a version that contains a fix for this issue...
PT-2018-16987
Name of the Vulnerable Software and Affected Versions NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 Description The issue concerns the Java Management Extension Remote Method Invocation JMX RMI service, which is bound to the network in the affected versions, making them...
CVE-2018-5485: Undefined Security Weakness
NetApp OnCommand Unified Manager for Windows versions 7.2 through 7.3 are susceptible to a vulnerability which could lead to a privilege escalation attack...
