OA
Product
Oncommand Api Services
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 6Medium 3Low 0
Watch
Add Oncommand Api Services to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-14550 | 8.8 | Jul 10 | An issue has been found in third-party PNM decoding associated with libpng 1.6.35 Affected: All versions, or not specified |
| CVE-2021-20190 | 8.1 | Jan 19 | A flaw was found in jackson-databind before 2.9.10.7 Affected: All versions, or not specified |
| CVE-2017-15518 | 7.8 | Feb 23 | All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 log a privileged database user account password Affected: through 2.0 |
| CVE-2020-25649 | 7.5 | Dec 3 | A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly Affected: All versions, or not specified |
| CVE-2020-11612 | 7.5 | Apr 7 | The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream Affected: All versions, or not specified |
| CVE-2019-17359 | 7.5 | Oct 8 | The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data Affected: All versions, or not specified |
Showing 6