NetApp OnCommand Insight 7.1

CPE Details

NetApp OnCommand Insight 7.1
netapp
oncommand_insight
7.1
2019-09-24
14h23 +00:00
2019-09-24
14h23 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:netapp:oncommand_insight:7.1:*:*:*:*:*:*:*

Informations

Vendor

netapp

Product

oncommand_insight

Version

7.1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-10719 2020-05-26 12h57 +00:00 A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.
6.5
Medium
CVE-2019-5498 2019-08-09 15h58 +00:00 OnCommand Insight versions through 7.3.6 may disclose sensitive account information to an authenticated user.
6.5
Medium
CVE-2019-5496 2019-05-10 17h24 +00:00 Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.
7.5
High
CVE-2019-7317 2019-02-04 06h00 +00:00 png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
5.3
Medium
CVE-2017-13652 2018-07-31 16h00 +00:00 NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user interface.
6.5
Medium
CVE-2018-3082 2018-07-18 11h00 +00:00 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).
2.7
Low
CVE-2017-5600 2017-02-02 14h00 +00:00 The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative access by leveraging a default privileged account.
9.8
Critical