Oncommand Unified Manager vulnerabilities | LiveThreat CVE Feed

Product

Oncommand Unified Manager

by Netapp · last CVE Jan 28, 2021

On CISA KEVExploited in the wild

169

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities169 In the news0 Timeline

Severity mix

Critical 26High 47Medium 85Low 11

Severity

All severities169 Critical26 High47 Medium85 Low11

Exploitation

On CISA KEV3 Exploited in the wild3

Watch

Add Oncommand Unified Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-2973	5.9	5%	Jul 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE) Affected: All versions, or not specified
CVE-2017-10135	5.9	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: through 7.1; through 7.1
CVE-2015-7852	5.9	12%	Aug 7	ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets Affected: All versions, or not specified
CVE-2020-8585	5.5	0%	Jan 28	OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link (plink) Affected: before 5.2.5
CVE-2019-2436	5.5	2%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: 7.3 and later; 9.4 and later
CVE-2018-3247	5.5	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge) Affected: 9.4 and later; 7.3 and later
CVE-2018-3195	5.5	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.3 and later; 9.4 and later
CVE-2018-3187	5.5	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 9.4 and later; 7.3 and later
CVE-2018-3185	5.5	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 9.4 and later; 7.3 and later
CVE-2018-2812	5.5	2%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.4 and later
CVE-2020-14803	5.3	3%	Oct 21	Vulnerability in the Java SE product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified
CVE-2018-15473	5.3	99%	Aug 17	OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has… Affected: 9.4 and later
CVE-2017-7568	5.3	1%	Jun 22	NetApp OnCommand Unified Manager for 7-Mode (core package) versions prior to 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP… Affected: before 5.2.3
CVE-2017-10357	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization) Affected: through 7.1; through 7.1
CVE-2017-10355	5.3	16%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: through 7.1; through 7.1
CVE-2017-10350	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS) Affected: through 7.1; through 7.1
CVE-2017-10349	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: through 7.1; through 7.1
CVE-2017-10348	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: through 7.1; through 7.1
CVE-2017-10347	5.3	3%	Oct 19	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: through 7.1; through 7.1
CVE-2017-10281	5.3	3%	Oct 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: through 7.1; through 7.1
CVE-2017-10109	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: through 7.1; through 7.1
CVE-2017-10108	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: through 7.1; 7.1
CVE-2017-10053	5.3	3%	Aug 8	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D) Affected: through 7.1; through 7.1
CVE-2019-2536	5.0	0%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: 7.3 through 9.5; 7.3 through 9.5
CVE-2019-2530	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.4 and later
CVE-2019-2539	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection) Affected: 7.3 through 9.5; 7.3 through 9.5
CVE-2019-2532	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges) Affected: 7.3 and later; 9.4 and later
CVE-2019-2531	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: 7.3 and later; 9.4 and later
CVE-2019-2537	4.9	4%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.3 through 9.5; 7.3 through 9.5
CVE-2019-2502	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 7.3 and later; 9.4 and later
CVE-2019-2481	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.4 and later
CVE-2019-2420	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.4 and later
CVE-2018-3285	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Windows) Affected: 9.4 and later; 7.3 and later
CVE-2018-3280	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: JSON) Affected: 9.4 and later; 7.3 and later
CVE-2018-3279	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles) Affected: 9.4 and later; 7.3 and later
CVE-2018-3278	4.9	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR) Affected: 9.4 and later; 7.3 and later
CVE-2018-3276	4.9	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached) Affected: 9.4 and later; 7.3 and later
CVE-2018-3212	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Information Schema) Affected: 7.3 through 9.5; 7.3 through 9.5
CVE-2018-3186	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.4 and later
CVE-2018-3170	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 9.4 and later; 7.3 and later
CVE-2018-2846	4.9	3%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema) Affected: 7.3 and later; 9.4 and later
CVE-2018-2839	4.9	3%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Affected: 7.3 and later; 9.4 and later
CVE-2018-2818	4.9	3%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges) Affected: 7.3 and later; 9.4 and later
CVE-2018-2816	4.9	3%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.4 and later
CVE-2017-10320	4.9	2%	Oct 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB) Affected: through 7.1; through 7.1
CVE-2018-2581	4.7	3%	Jan 18	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: All versions, or not specified
CVE-2018-3283	4.4	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Logging) Affected: 9.4 and later; 7.3 and later
CVE-2017-10286	4.4	2%	Oct 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB) Affected: through 7.1; through 7.1
CVE-2018-3286	4.3	1%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges) Affected: 9.4 and later; 7.3 and later
CVE-2018-2940	4.3	3%	Jul 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified