Product by NetApp
Netapp Oncommand API Services
19 known vulnerabilities in Netapp Oncommand API Services (NetApp), 0 of them actively exploited (CISA KEV).
Key figures
19
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2017-5645 | Apache Log4j: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2020-8840 | FasterXML Jackson-databind: security vulnerability | 9.8 | |
| Critical | CVE-2019-14540 | FasterXML Jackson-databind: security vulnerability | 9.8 | |
| Critical | CVE-2019-20330 | FasterXML Jackson-databind: security vulnerability | 9.8 | |
| Critical | CVE-2020-10683 | Dom4j Project Dom4j: XML External Entity (XXE) | 9.8 | |
| Critical | CVE-2019-16942 | FasterXML Jackson-databind: security vulnerability | 9.8 | |
| Critical | CVE-2019-16335 | FasterXML Jackson-databind: security vulnerability | 9.8 | |
| Critical | CVE-2019-16943 | FasterXML Jackson-databind: security vulnerability | 9.8 | |
| Critical | CVE-2019-17267 | FasterXML Jackson-databind: security vulnerability | 9.8 | |
| High | CVE-2020-25649 | Jackson-databind: Improper Restriction of XML External Entity Reference | 7.5 | |
| High | CVE-2021-20190 | Jackson-databind: Deserialization of Untrusted Data | 8.1 | |
| High | CVE-2020-11612 | Netty: security vulnerability | 7.5 | |
| High | CVE-2019-17359 | Apache Software Foundation TomEE: security vulnerability | 7.5 | |
| High | CVE-2018-14550 | libpng: Stack-Based Buffer Overflow | 8.8 | |
| Medium | CVE-2021-21295 | Possible request smuggling in HTTP/2 due missing validation | 5.9 | |
| Critical | CVE-2019-14893 | Red Hat Jackson-databind: Deserialization of Untrusted Data | 7.5 | |
| Medium | CVE-2021-21409 | Possible request smuggling in HTTP/2 due missing validation of content-length | 5.9 | |
| Medium | CVE-2017-8919 | Netapp Oncommand API Services: security vulnerability | 6.5 | |
| High | CVE-2017-15518 | NetApp OnCommand API Services and NetApp Service Level Manager: security vulnerability | 7.8 |