Oncommand Unified Manager vulnerabilities | LiveThreat CVE Feed

Product

Oncommand Unified Manager

by Netapp · last CVE Jan 28, 2021

On CISA KEVExploited in the wild

169

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities169 In the news0 Timeline

Severity mix

Critical 26High 47Medium 85Low 11

Severity

All severities169 Critical26 High47 Medium85 Low11

Exploitation

On CISA KEV3 Exploited in the wild3

Watch

Add Oncommand Unified Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-2536	5.0	0%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: 7.3 through 9.5; 7.3 through 9.5
CVE-2019-2530	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.4 and later
CVE-2019-2539	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection) Affected: 7.3 through 9.5; 7.3 through 9.5
CVE-2019-2532	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges) Affected: 7.3 and later; 9.4 and later
CVE-2019-2531	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: 7.3 and later; 9.4 and later
CVE-2019-2537	4.9	4%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.3 through 9.5; 7.3 through 9.5
CVE-2019-2502	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 7.3 and later; 9.4 and later
CVE-2019-2481	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.4 and later
CVE-2019-2420	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.4 and later
CVE-2018-3285	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Windows) Affected: 9.4 and later; 7.3 and later
CVE-2018-3280	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: JSON) Affected: 9.4 and later; 7.3 and later
CVE-2018-3279	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles) Affected: 9.4 and later; 7.3 and later
CVE-2018-3278	4.9	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR) Affected: 9.4 and later; 7.3 and later
CVE-2018-3276	4.9	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached) Affected: 9.4 and later; 7.3 and later
CVE-2018-3212	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Information Schema) Affected: 7.3 through 9.5; 7.3 through 9.5
CVE-2018-3186	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.4 and later
CVE-2018-3170	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 9.4 and later; 7.3 and later
CVE-2018-2846	4.9	3%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema) Affected: 7.3 and later; 9.4 and later
CVE-2018-2839	4.9	3%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Affected: 7.3 and later; 9.4 and later
CVE-2018-2818	4.9	3%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges) Affected: 7.3 and later; 9.4 and later
CVE-2018-2816	4.9	3%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.4 and later
CVE-2017-10320	4.9	2%	Oct 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB) Affected: through 7.1; through 7.1
CVE-2018-2581	4.7	3%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: All versions, or not specified
CVE-2018-3283	4.4	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Logging) Affected: 9.4 and later; 7.3 and later
CVE-2017-10286	4.4	2%	Oct 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB) Affected: through 7.1; through 7.1
CVE-2018-3286	4.3	1%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges) Affected: 9.4 and later; 7.3 and later
CVE-2018-2940	4.3	3%	Jul 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified
CVE-2018-2813	4.3	3%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.3 and later; 9.4 and later
CVE-2017-11461	4.3	1%	Nov 10	NetApp OnCommand Unified Manager for 7-mode (core package) versions prior to 5.2.1 are susceptible to a clickjacking or "UI redress attack" which could be used to cause a user to… Affected: before 5.2.1
CVE-2017-10105	4.3	2%	Aug 8	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: through 7.1; through 7.1
CVE-2017-10081	4.3	2%	Aug 8	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: through 7.1; through 7.1
CVE-2020-14792	4.2	2%	Oct 21	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified
CVE-2019-2535	4.1	0%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options) Affected: 7.3 through 9.5; 7.3 through 9.5
CVE-2017-10268	4.1	1%	Oct 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: through 7.1; through 7.1
CVE-2017-10295	4.0	2%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: through 7.1; through 7.1