[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkCBqkIF6SJSSebYO0m4ONddtvAr6pzB0K7GbU1b0DA8":3,"g5a-family:netapp\u002Foncommand_performance_manager":105,"g5a-ex:netapp\u002Foncommand_performance_manager@*":106},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":73,"seoMetadata":83,"meta":102},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"netapp","oncommand_performance_manager",0,73,2,"2018-02-06",[],"Oncommand Performance Manager by Netapp is a technology product and 73 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,32,38,42,48,53,59,64,68],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.","2016-04-21",9.8,"v3.1","Critical",0.92334,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":4,"epssScore":31},"CVE-2016-5195","Race condition in mm\u002Fgup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"","2016-11-10",7,"High",0.83524,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":36,"epssScore":37},"CVE-2015-7871","Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.","2017-08-07",false,0.81762,{"cveId":39,"description":40,"publishedDate":12,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":36,"epssScore":41},"CVE-2017-7525","A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.",0.37721,{"cveId":43,"description":44,"publishedDate":35,"cvssScore":45,"cvssVersion":22,"severity":46,"isKev":36,"epssScore":47},"CVE-2015-7855","The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.",6.5,"Medium",0.31068,{"cveId":49,"description":50,"publishedDate":35,"cvssScore":51,"cvssVersion":22,"severity":30,"isKev":36,"epssScore":52},"CVE-2015-7849","Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.",8.8,0.16848,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":22,"severity":46,"isKev":36,"epssScore":58},"CVE-2017-10355","Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L).","2017-10-19",5.3,0.16181,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":57,"cvssVersion":22,"severity":46,"isKev":36,"epssScore":63},"CVE-2016-2518","The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.","2017-01-30",0.15081,{"cveId":65,"description":66,"publishedDate":35,"cvssScore":51,"cvssVersion":22,"severity":30,"isKev":36,"epssScore":67},"CVE-2015-7854","Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.",0.1456,{"cveId":69,"description":70,"publishedDate":35,"cvssScore":71,"cvssVersion":22,"severity":46,"isKev":36,"epssScore":72},"CVE-2015-7852","ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.",5.9,0.12282,[74,79],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":75,"cisaDateAdded":76,"cisaShortDescription":77,"cisaRequiredAction":78},"Oracle Java SE and JRockit Unspecified Vulnerability","2023-05-12","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.","Apply updates per vendor instructions.",{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"severity":30,"isKev":4,"epssScore":31,"cisaVulnName":80,"cisaDateAdded":81,"cisaShortDescription":82,"cisaRequiredAction":78},"Linux Kernel Race Condition Vulnerability","2022-03-03","Race condition in mm\u002Fgup.c in the Linux kernel allows local users to escalate privileges.",{"title":84,"metaDescription":85,"keywords":86,"structuredData":87},"Oncommand Performance Manager by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Oncommand Performance Manager by Netapp with 73 tracked vulnerabilities including 1 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Oncommand Performance Manager vulnerabilities, Oncommand Performance Manager security, Oncommand Performance Manager CVE, Netapp Oncommand Performance Manager, Oncommand Performance Manager threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Oncommand Performance Manager KEV, Oncommand Performance Manager exploited vulnerabilities",{"@context":88,"@type":89,"name":90,"description":85,"url":91,"manufacturer":92,"applicationCategory":96,"softwareVersion":97,"mainEntity":98},"https:\u002F\u002Fschema.org","SoftwareApplication","Oncommand Performance Manager","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Foncommand_performance_manager",{"@type":93,"name":94,"url":95},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":99,"name":100,"description":101,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Oncommand Performance Manager Security Vulnerabilities","Security vulnerabilities affecting Oncommand Performance Manager by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":103,"apiVersion":104},"2026-10-17T14:55:13.799Z","3.0",[],{"rows":107,"total":11,"capped":36,"failed":9},[108,112],{"cveId":18,"name":75,"severity":23,"cvss":21,"added":76,"epss":24,"published":109,"ranges":110,"checked":4,"hits":111,"covers":36},"2016-04-21T11:00:21.667",[],[],{"cveId":26,"name":80,"severity":30,"cvss":29,"added":81,"epss":31,"published":113,"ranges":114,"checked":4,"hits":115,"covers":36},"2016-11-10T21:59:00.197",[],[]]