OU
Product
Oncommand Unified Manager Core Package
On CISA KEVExploited in the wild
11
CVEs
1
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 5Low 1
Watch
Add Oncommand Unified Manager Core Package to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3156 In wildKEV | 7.8 | Jan 26 | Sudo Heap-Based Buffer Overflow Vulnerability Affected: All versions, or not specified |
| CVE-2021-23926 | 9.1 | Jan 14 | The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input Affected: All versions, or not specified |
| CVE-2019-17069 | 7.5 | Oct 1 | PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message Affected: All versions, or not specified |
| CVE-2017-7439 | 7.5 | May 26 | NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 might allow remote attackers to obtain sensitive information via vectors involving error messages Affected: 5.0; 5.0.1; 5.0.2; 5.1; 5.2; 5.2.1; +1 more |
| CVE-2017-7236 | 7.5 | May 26 | SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors Affected: 5.0; 5.0.1; 5.0.2; 5.1; 5.2; 5.2.1; +1 more |
| CVE-2020-1927 | 6.1 | Apr 2 | In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to… Affected: All versions, or not specified |
| CVE-2020-14002 | 5.9 | Jun 29 | PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation Affected: All versions, or not specified |
| CVE-2019-1559 | 5.9 | Feb 27 | 0-byte record padding oracle Affected: All versions, or not specified |
| CVE-2020-14621 | 5.3 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
| CVE-2017-15906 | 5.3 | Oct 26 | The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files Affected: All versions, or not specified |
| CVE-2020-14779 | 3.7 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified |
Showing 11