[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvDX3Ip8D1oVcnQjrGa3Pw1N62OCaoz2YXiS4zrv2ZJQ":3,"g5a-family:netapp\u002Foncommand_unified_manager":159,"g5a-ex:netapp\u002Foncommand_unified_manager@*":169},{"success":4,"data":5},true,{"product":6,"versions":46,"topVulnerabilitiesByEpss":61,"kevVulnerabilities":123,"seoMetadata":137,"meta":156},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":45},"netapp","oncommand_unified_manager",14,169,3,"2021-01-28",[14,18,20,22,24,26,28,30,32,34,37,39,41,43],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"5.1",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"5.2.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"5.2.2",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"5.2.3",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"5.2.4",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"5.2.5",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"6.3",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"6.4",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"7.0",{"version":35,"cve_count":36,"kev_count":16,"has_kev":17},"7.1",2,{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},"7.2",{"version":40,"cve_count":36,"kev_count":16,"has_kev":17},"7.3",{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},"9.4",{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},"9.5","Oncommand Unified Manager by Netapp is a technology product with 14 tracked versions and 169 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[47,48,49,50,51,52,53,54,55,56,57,58,59,60],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":36,"kev_count":16,"has_kev":17},{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},{"version":40,"cve_count":36,"kev_count":16,"has_kev":17},{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},[62,70,77,84,91,96,102,108,113,118],{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":67,"severity":68,"isKev":17,"epssScore":69},"CVE-2018-15473","OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.","2018-08-17",5.3,"v3.1","Medium",0.98631,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":67,"severity":75,"isKev":4,"epssScore":76},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.","2016-04-21",9.8,"Critical",0.92334,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":82,"severity":75,"isKev":17,"epssScore":83},"CVE-2018-10933","A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.","2018-10-17",9.1,"v3.0",0.91789,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":67,"severity":89,"isKev":4,"epssScore":90},"CVE-2010-1871","JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL.  NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.","2010-08-05",8.8,"High",0.83397,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":74,"cvssVersion":67,"severity":75,"isKev":17,"epssScore":95},"CVE-2015-7871","Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.","2017-08-07",0.81762,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":100,"cvssVersion":67,"severity":89,"isKev":4,"epssScore":101},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",7.8,0.65005,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":106,"cvssVersion":67,"severity":89,"isKev":17,"epssScore":107},"CVE-2017-7668","The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.","2017-06-20",7.5,0.57472,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":81,"cvssVersion":82,"severity":75,"isKev":17,"epssScore":112},"CVE-2017-9788","In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.","2017-07-13",0.5677,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":106,"cvssVersion":67,"severity":89,"isKev":17,"epssScore":117},"CVE-2016-8610","A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS\u002FSSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS\u002FSSL server consume an excessive amount of CPU and fail to accept connections from other clients.","2017-11-13",0.39657,{"cveId":119,"description":120,"publishedDate":94,"cvssScore":121,"cvssVersion":67,"severity":68,"isKev":17,"epssScore":122},"CVE-2015-7855","The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.",6.5,0.31068,[124,129,133],{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"severity":75,"isKev":4,"epssScore":76,"cisaVulnName":125,"cisaDateAdded":126,"cisaShortDescription":127,"cisaRequiredAction":128},"Oracle Java SE and JRockit Unspecified Vulnerability","2023-05-12","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.","Apply updates per vendor instructions.",{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"severity":89,"isKev":4,"epssScore":90,"cisaVulnName":130,"cisaDateAdded":131,"cisaShortDescription":132,"cisaRequiredAction":128},"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","2021-12-10","JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.",{"cveId":97,"description":98,"publishedDate":99,"cvssScore":100,"severity":89,"isKev":4,"epssScore":101,"cisaVulnName":134,"cisaDateAdded":135,"cisaShortDescription":136,"cisaRequiredAction":128},"Apache HTTP Server Privilege Escalation Vulnerability","2021-11-03","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"title":138,"metaDescription":139,"keywords":140,"structuredData":141},"Oncommand Unified Manager by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Oncommand Unified Manager by Netapp covering 14 versions with 169 tracked vulnerabilities including 1 critical and 2 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Oncommand Unified Manager vulnerabilities, Oncommand Unified Manager security, Oncommand Unified Manager CVE, Netapp Oncommand Unified Manager, Oncommand Unified Manager threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Oncommand Unified Manager KEV, Oncommand Unified Manager exploited vulnerabilities",{"@context":142,"@type":143,"name":144,"description":139,"url":145,"manufacturer":146,"applicationCategory":150,"softwareVersion":151,"mainEntity":152},"https:\u002F\u002Fschema.org","SoftwareApplication","Oncommand Unified Manager","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Foncommand_unified_manager",{"@type":147,"name":148,"url":149},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","14 versions tracked",{"@type":153,"name":154,"description":155,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Oncommand Unified Manager Security Vulnerabilities","Security vulnerabilities affecting Oncommand Unified Manager by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":157,"apiVersion":158},"2026-10-17T14:55:14.497Z","3.0",[160,163,166],{"product":161,"cves":162},"oncommand_unified_manager_core_package",11,{"product":164,"cves":165},"oncommand_unified_manager_for_clustered_data_ontap",4,{"product":167,"cves":168},"oncommand_unified_manager_for_7-mode",1,{"rows":170,"total":11,"capped":17,"failed":16},[171,175,179],{"cveId":71,"name":125,"severity":75,"cvss":74,"added":126,"epss":76,"published":172,"ranges":173,"checked":4,"hits":174,"covers":17},"2016-04-21T11:00:21.667",[],[],{"cveId":85,"name":130,"severity":89,"cvss":88,"added":131,"epss":90,"published":176,"ranges":177,"checked":4,"hits":178,"covers":17},"2010-08-05T13:23:09.477",[],[],{"cveId":97,"name":134,"severity":89,"cvss":100,"added":135,"epss":101,"published":180,"ranges":181,"checked":4,"hits":182,"covers":17},"2019-04-08T22:29:00.387",[],[]]