Netapp Oncommand Unified Manager For 7 Mode (Core Package) vulnerabilities

2 vulnerabilities

Known vulnerabilities in Netapp Oncommand Unified Manager For 7 Mode (Core Package), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.4CVE-2018-5481netapponcommand_unified_manager+1
EPSS score
0.65%
OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle (MITM) attacks.5.3CVE-2017-7568netapponcommand_unified_manager+1
EPSS score
1.32%
NetApp OnCommand Unified Manager for 7-Mode (core package) versions prior to 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is tested via the user interface.