Oncommand Unified Manager vulnerabilities

3 known vulnerabilities in Oncommand Unified Manager from NetApp. 3 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Apache HTTP Server Privilege Escalation Exploited

  CVE-2019-0211Apr 8, 2019ApacheEPSS 65%

  In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privi

• 9.8 Critical severity

  Oracle Java SE and JRockit Unspecified Exploited

  CVE-2016-3427Apr 21, 2016OracleEPSS 92.3%

  Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

• 8.8 High severity

  Red Hat Linux JBoss Seam 2 Remote Code Execution Exploited

  CVE-2010-1871Aug 5, 2010Red HatEPSS 83.4%

  JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. N