Oncommand Unified Manager Core Package
Vendor:
First CVE: May 26, 2017 · Active for 9 years
11
Total CVEs
More Total CVEs than 89% of tracked products
2.8
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 31% of tracked products
9.1%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Oncommand Unified Manager Core Package over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 26, 2017
9 years ago
Most Recent CVE
Jan 26, 2021
2,005 days ago
CVE Severity & Scoring
Oncommand Unified Manager Core Package11 CVEs
9%
45%
36%
9%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local1 (9.1%)
Network10 (90.9%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (72.7%)
High3 (27.3%)
Unknown0 (0.0%)
User Interaction
None10 (90.9%)
Unknown0 (0.0%)
Required1 (9.1%)
Privileges Required
Low1 (9.1%)
High0 (0.0%)
None10 (90.9%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-3156HIGH Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line arg | Jan 26, 2021 | 7.8 | 99 | YES | YES |
CVE-2020-1927MEDIUM In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to a | Apr 2, 2020 | 6.1 | 43 | NO | NO |
CVE-2021-23926CRITICAL The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML E | Jan 14, 2021 | 9.1 | 31 | NO | NO |
CVE-2019-1559MEDIUM If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently | Feb 27, 2019 | 5.9 | 30 | NO | NO |
CVE-2019-17069HIGH PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message. | Oct 1, 2019 | 7.5 | 25 | NO | NO |
CVE-2017-7439HIGH NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 might allow remote attackers to obtain sensitive information via vectors involving error messages. | May 26, 2017 | 7.5 | 24 | NO | NO |
CVE-2020-14621MEDIUM Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java | Jul 15, 2020 | 5.3 | 22 | NO | NO |
CVE-2020-14002MEDIUM PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connect | Jun 29, 2020 | 5.9 | 22 | NO | NO |
CVE-2017-15906MEDIUM The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files. | Oct 26, 2017 | 5.3 | 21 | NO | NO |
CVE-2017-7236HIGH SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | May 26, 2017 | 7.5 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (11 CVEs).
CISA KEV
1 CVE
9.1% of CVEs· 97th percentile
Metasploit
1 CVE
9.1% of CVEs· 97th percentile
Nuclei
1 CVE
9.1% of CVEs· 97th percentile
ExploitDB
1 CVE
9.1% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (11 CVEs).
Media Mentions
Signals from CVEs in this product scope (11 CVEs).
Top CNAs Publishing CVEs For Oncommand Unified Manager Core Package
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.2.2 | 2 | 7.5 | 1.8% | 0 | 0 |
| 5.2.1 | 2 | 7.5 | 1.8% | 0 | 0 |
| 5.2 | 2 | 7.5 | 1.8% | 0 | 0 |
| 5.1 | 2 | 7.5 | 1.8% | 0 | 0 |
| 5.0.2 | 2 | 7.5 | 1.8% | 0 | 0 |
| 5.0.1 | 2 | 7.5 | 1.8% | 0 | 0 |
| 5.0 | 2 | 7.5 | 1.8% | 0 | 0 |