CVE-2019-5494

CVE-2019-5494 describes a vulnerability in NetApp OnCommand Unified Manager 7-Mode versions prior to 5.2.4, where the absence of critical HTTP security headers could lead to sensitive information disclosure. With a CVSS v3 score of 7.5 (High), this vulnerability is remotely exploitable with low attack complexity and no user interaction required, potentially allowing an attacker to gain confidential data. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.