Known Vulnerabilities for Oncommand System Manager by Netapp
Listed below are 10 of the newest known vulnerabilities associated with "Oncommand System Manager" by "Netapp".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-27218 json | In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if ... | 4.8 - MEDIUM | 2020-11-28 | 2023-11-07 |
| CVE-2020-17527 json | While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.... | 7.5 - HIGH | 2020-12-03 | 2023-11-07 |
| CVE-2020-13935 json | The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.... | 7.5 - HIGH | 2020-07-14 | 2023-11-07 |
| CVE-2020-13934 json | An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the ... | 7.5 - HIGH | 2020-07-14 | 2023-11-07 |
| CVE-2020-11996 json | A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to... | 7.5 - HIGH | 2020-06-26 | 2023-11-07 |
| CVE-2020-11023 json | In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing | 6.1 - MEDIUM | 2020-04-29 | 2023-11-07 |
| CVE-2020-8587 json | OnCommand System Manager 9.x versions prior to 9.3P20 and 9.4 prior to 9.4P3 are susceptible to a vulnerability that could al... | 5.5 - MEDIUM | 2021-02-08 | 2021-02-12 |
| CVE-2020-7656 json | jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove ... | 6.1 - MEDIUM | 2020-05-19 | 2023-06-22 |
| CVE-2020-1935 json | In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end... | 4.8 - MEDIUM | 2020-02-24 | 2023-11-07 |
| CVE-2019-17571 json | Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited ... | 9.8 - CRITICAL | 2019-12-20 | 2023-11-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Netapp | Oncommand System Manager | 9.4 | |||
| Application | Netapp | Oncommand System Manager | 9.3 | |||
| Application | Netapp | Oncommand System Manager | 3.1.3 | |||
| Application | Netapp | Oncommand System Manager | 3.0 | |||
| Application | Netapp | Oncommand System Manager | 2.2 | |||
| Application | Netapp | Oncommand System Manager | 2.1 | |||
| Application | Netapp | Oncommand System Manager | 2.0.2 | |||
| Application | Netapp | Oncommand System Manager | - |