Unscored severity · published Feb 6, 2015
CVE-2014-9354
NetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via unspecified vectors related to cleartext storage
–
CVSS
1%
EPSS
No
On KEV
Description
NetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via unspecified vectors related to cleartext storage.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OB
Oncommand Balance · Netapp
through 4.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-9354
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-9354
Vendor Advisory
https://kb.netapp.com/support/index?page=content&id=9010021
More from Oncommand Balance
9.8
CVE-2017-5638
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload…
9.8
CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
8.8
CVE-2010-1871
Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
8.1
CVE-2017-12617
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g
8.1
CVE-2017-12615
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g