Oncommand Unified Manager vulnerabilities | LiveThreat CVE Feed

Product

Oncommand Unified Manager

by Netapp · last CVE Jan 28, 2021

On CISA KEVExploited in the wild

169

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities169 In the news0 Timeline

Severity mix

Critical 26High 47Medium 85Low 11

Severity

All severities169 Critical26 High47 Medium85 Low11

Exploitation

On CISA KEV3 Exploited in the wild3

Watch

Add Oncommand Unified Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-10274	6.8	3%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: through 7.1; through 7.1
CVE-2017-10198	6.8	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: through 7.1; through 7.1
CVE-2019-2434	6.5	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 7.3 and later; 9.4 and later
CVE-2019-2529	6.5	4%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.4 and later
CVE-2019-2533	6.5	2%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges) Affected: 7.3 through 9.5; 7.3 through 9.5
CVE-2018-3251	6.5	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 9.4 and later; 7.3 and later
CVE-2018-3203	6.5	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 through 9.5; 7.3 through 9.5
CVE-2018-3182	6.5	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Affected: 7.3 and later; 9.4 and later
CVE-2018-3156	6.5	4%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 9.4 and later; 7.3 and later
CVE-2018-3145	6.5	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 7.3 through 9.5; 7.3 through 9.5
CVE-2018-3143	6.5	4%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 9.4 and later; 7.3 and later
CVE-2018-3137	6.5	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 9.4 and later; 7.3 and later
CVE-2018-3133	6.5	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 9.4 and later
CVE-2018-11212	6.5	5%	May 16	An issue was discovered in libjpeg 9a and 9d Affected: 7.3 and later; 9.4 and later
CVE-2017-10384	6.5	3%	Oct 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: through 7.1; through 7.1
CVE-2017-10379	6.5	2%	Oct 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: through 7.1; through 7.1
CVE-2017-10378	6.5	3%	Oct 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: through 7.1; through 7.1
CVE-2017-10243	6.5	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS) Affected: through 7.1; through 7.1
CVE-2015-7855	6.5	31%	Aug 7	The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7… Affected: All versions, or not specified
CVE-2015-7850	6.5	6%	Aug 7	ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the… Affected: All versions, or not specified
CVE-2015-7702	6.5	5%	Aug 7	The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) Affected: All versions, or not specified
CVE-2017-10356	6.2	1%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: through 7.1; through 7.1
CVE-2017-10293	6.1	1%	Oct 19	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc) Affected: through 7.1; through 7.1
CVE-2019-1559	5.9	17%	Feb 27	0-byte record padding oracle Affected: All versions, or not specified
CVE-2018-0734	5.9	12%	Oct 30	Timing attack against DSA Affected: All versions, or not specified
CVE-2018-0735	5.9	5%	Oct 29	Timing attack against ECDSA signature generation Affected: 9.4 and later
CVE-2018-3144	5.9	4%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit) Affected: 9.4 and later; 7.3 and later
CVE-2018-2973	5.9	5%	Jul 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE) Affected: All versions, or not specified
CVE-2017-10135	5.9	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: through 7.1; through 7.1
CVE-2015-7852	5.9	12%	Aug 7	ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets Affected: All versions, or not specified
CVE-2020-8585	5.5	0%	Jan 28	OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link (plink) Affected: before 5.2.5
CVE-2019-2436	5.5	2%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: 7.3 and later; 9.4 and later
CVE-2018-3247	5.5	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge) Affected: 9.4 and later; 7.3 and later
CVE-2018-3195	5.5	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.3 and later; 9.4 and later
CVE-2018-3187	5.5	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 9.4 and later; 7.3 and later
CVE-2018-3185	5.5	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 9.4 and later; 7.3 and later
CVE-2018-2812	5.5	2%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.4 and later
CVE-2020-14803	5.3	3%	Oct 21	Vulnerability in the Java SE product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2018-15473	5.3	99%	Aug 17	OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has… Affected: 9.4 and later
CVE-2017-7568	5.3	1%	Jun 22	NetApp OnCommand Unified Manager for 7-Mode (core package) versions prior to 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP… Affected: before 5.2.3
CVE-2017-10357	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization) Affected: through 7.1; through 7.1
CVE-2017-10355	5.3	16%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: through 7.1; through 7.1
CVE-2017-10350	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS) Affected: through 7.1; through 7.1
CVE-2017-10349	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: through 7.1; through 7.1
CVE-2017-10348	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: through 7.1; through 7.1
CVE-2017-10347	5.3	3%	Oct 19	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: through 7.1; through 7.1
CVE-2017-10281	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: through 7.1; through 7.1
CVE-2017-10109	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: through 7.1; through 7.1
CVE-2017-10108	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: through 7.1; 7.1
CVE-2017-10053	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D) Affected: through 7.1; through 7.1