Product by NetApp
OnCommand System Manager 9.x
27 known vulnerabilities in OnCommand System Manager 9.x (NetApp), 2 of them actively exploited (CISA KEV).
Key figures
27
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-1938 | Apache Tomcat Improper Privilege Management Vulnerability In CISA KEValso in 20 other products | 9.8 | |
| Critical | CVE-2020-11023 | Potential XSS vulnerability in jQuery In CISA KEValso in 48 other products | 6.9 | |
| Critical | CVE-2019-17571 | Apache Software Foundation Log4j: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2017-7658 | The Eclipse Foundation Eclipse Jetty: HTTP Request/Response Smuggling | 9.8 | |
| Critical | CVE-2017-7657 | The Eclipse Foundation Eclipse Jetty: HTTP Request/Response Smuggling | 9.8 | |
| High | CVE-2020-13935 | Apache Tomcat: Infinite Loop | 7.5 | |
| High | CVE-2020-13934 | Apache Tomcat: Denial of Service | 7.5 | |
| Medium | CVE-2020-11022 | jQuery has a potential XSS vulnerability | 6.9 | |
| High | CVE-2020-11996 | Apache Tomcat: security vulnerability | 7.5 | |
| High | CVE-2020-17527 | Apache Tomcat: Request header mix-up between HTTP/2 streams | 7.5 | |
| Medium | CVE-2019-11358 | Drupal core: security vulnerability | 6.1 | |
| High | CVE-2018-12538 | The Eclipse Foundation Eclipse Jetty: J2EE Misconfiguration: Insufficient Session-ID Length | 8.8 | |
| Medium | CVE-2020-7656 | Jquery: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2013-3322 | NetApp OnCommand System Manager: security vulnerability | 7.2 | |
| Medium | CVE-2020-1935 | Apache Tomcat: security vulnerability | 4.8 | |
| Medium | CVE-2019-17569 | Apache Tomcat: security vulnerability | 4.8 | |
| Medium | CVE-2020-27218 | The Eclipse Foundation Eclipse Jetty: Sensitive Information in Resource Not Removed Before Reuse | 4.8 | |
| Medium | CVE-2019-10247 | The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information Due to Incompatible Policies | 5.3 | |
| High | CVE-2013-3321 | NetApp OnCommand System Manager: security vulnerability | 7.5 | |
| Medium | CVE-2019-10246 | The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information Due to Incompatible Policies | 5.3 | |
| Medium | CVE-2016-5047 | NetApp OnCommand System Manager: Denial of Service | 6.5 | |
| Medium | CVE-2013-3320 | NetApp OnCommand System Manager: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2016-5045 | NetApp OnCommand System Manager: security vulnerability | 8.1 | |
| High | CVE-2016-3063 | NetApp OnCommand System Manager: security vulnerability | 7.5 | |
| High | CVE-2019-12418 | Apache Tomcat: security vulnerability | 7.0 |