Known vulnerabilities in OnCommand Unified Manager Core Package

Known vulnerabilities in OnCommand Unified Manager Core Package

Vendor: NetApp

Software: OnCommand Unified Manager Core Package

Software CPE: cpe:2.3:a:netapp:oncommand_unified_manager_core_package:*:*:*:*:*:*:*:*

Website: https://www.netapp.com/us/index.aspx

Total vulnerabilities: 7

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU18509 - Exposure of sensitive information to an unauthorized actor CVE-2019-5494	CWE-200	Medium	No	No	5.2.4	16.05.2019	SB2019051011
#VU38941 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2017-7236	CWE-89	Medium	No	No	-	26.05.2017	SB2017052612
#VU38942 - Exposure of sensitive information to an unauthorized actor CVE-2017-7439	CWE-200	Medium	No	No	-	26.05.2017	SB2017052612
#VU5215 - Exposed Dangerous Method or Function CVE-2014-3568	CWE-749	Low	No	No	5.2.1P1	20.01.2017	SB2014101601 SB2015092611 SB2014101501 and 17 more
#VU5213 - Missing release of memory after effective lifetime CVE-2014-3567	CWE-401	Medium	No	No	5.2.1P1	20.01.2017	SB2014101601 SB2015101602 SB2015092611 and 20 more
#VU5212 - Missing release of memory after effective lifetime CVE-2014-3513	CWE-401	Medium	No	No	5.2.1P1	20.01.2017	SB2014101601 SB2015101602 SB2015092611 and 14 more
#VU90 - Exposure of sensitive information to an unauthorized actor CVE-2015-2808	CWE-200	Medium	No	No	-	05.07.2016	SB2015040102 SB2015040103 SB2023011274 and 27 more