CVE-2019-17276

OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow an authenticated attacker to inject arbitrary scripts into the SNMP Community Names label field.

Score

CVSS 3.1 5.4 Medium

Status

Modified - security-alert@netapp.com

Published

2020-03-24

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Oncommand System Manager (Netapp)

References

• https://security.netapp.com/advisory/ntap-20200323-0001/