Oncommand Balance (Netapp) - vulnerabilities (CVEs)

83 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2019-01-16. Vendor: Netapp.

CVEs of Oncommand Balance

CVE-2017-3136 - CVSS 5.9 (medium), 2019-01-16: A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could…
CVE-2017-3140 - CVSS 5.9 (medium), 2019-01-16: If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while…
CVE-2017-3138 - CVSS 6.5 (medium), 2019-01-16: named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a…
CVE-2017-3137 - CVSS 7.5 (high), 2019-01-16: Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in…
CVE-2017-7525 - CVSS 9.8 (critical), 2018-02-06: A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to…
CVE-2017-15095 - CVSS 9.8 (critical), 2018-02-06: A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code…
CVE-2017-15707 - CVSS 6.2 (medium), 2017-12-01: In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious…
CVE-2016-8610 - CVSS 7.5 (high), 2017-11-13: A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT…
CVE-2017-10379 - CVSS 6.5 (medium), 2017-10-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.57 and earlier,…
CVE-2017-10378 - CVSS 6.5 (medium), 2017-10-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.57 and earlier,…
CVE-2017-10388 - CVSS 7.5 (high), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10384 - CVSS 6.5 (medium), 2017-10-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37…
CVE-2017-10347 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10350 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151,…
CVE-2017-10357 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE:…
CVE-2017-10346 - CVSS 9.6 (critical), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10349 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10356 - CVSS 6.2 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
CVE-2017-10348 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10355 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java…
CVE-2017-10365 - CVSS 3.8 (low), 2017-10-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.18 and earlier.…
CVE-2017-10320 - CVSS 4.9 (medium), 2017-10-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.19 and earlier.…
CVE-2017-10345 - CVSS 3.1 (low), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
CVE-2017-10286 - CVSS 4.4 (medium), 2017-10-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.37 and earlier and…
CVE-2017-10309 - CVSS 7.1 (high), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily…
CVE-2017-10285 - CVSS 9.6 (critical), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10295 - CVSS 4 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java…
CVE-2017-10281 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
CVE-2017-10293 - CVSS 6.1 (medium), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9.…
CVE-2017-10274 - CVSS 6.8 (medium), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144…
CVE-2017-10268 - CVSS 4.1 (medium), 2017-10-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.57 and earlier,…
CVE-2016-4461 - CVSS 8.8 (high), 2017-10-16: Apache Struts 2.x before 2.3.29 allows remote attackers to execute arbitrary code via a "%{}" sequence in a tag attribute, aka forced double OGNL evaluation.…
CVE-2017-12617 - CVSS 8.1 (high), 2017-10-04: When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the…
CVE-2017-12615 - CVSS 8.1 (high), 2017-09-19: When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false)…
CVE-2017-9805 - CVSS 8.1 (high), 2017-09-15: The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for…
CVE-2017-10243 - CVSS 6.5 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE:…
CVE-2017-10176 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
CVE-2017-10198 - CVSS 6.8 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
CVE-2017-10193 - CVSS 3.1 (low), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10135 - CVSS 5.9 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
CVE-2017-10125 - CVSS 7.1 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131.…
CVE-2017-10102 - CVSS 9 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141…
CVE-2017-10108 - CVSS 5.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
CVE-2017-10111 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE:…
CVE-2017-10116 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
CVE-2017-10101 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10107 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141…
CVE-2017-10110 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily…
CVE-2017-10115 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
CVE-2017-10096 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10105 - CVSS 4.3 (medium), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
CVE-2017-10109 - CVSS 5.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
CVE-2017-10114 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult…
CVE-2017-10118 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
CVE-2017-10090 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141…
CVE-2017-10067 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
CVE-2017-10081 - CVSS 4.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10089 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
CVE-2017-10078 - CVSS 8.1 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java SE: 8u131. Easily…
CVE-2017-10087 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10074 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10086 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily…
CVE-2017-10053 - CVSS 5.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE:…
CVE-2015-7852 - CVSS 5.9 (medium), 2017-08-07: ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.
CVE-2015-7855 - CVSS 6.5 (medium), 2017-08-07: The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion…
CVE-2015-7850 - CVSS 6.5 (medium), 2017-08-07: ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing…
CVE-2015-7854 - CVSS 8.8 (high), 2017-08-07: Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a…
CVE-2015-7849 - CVSS 8.8 (high), 2017-08-07: Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code…
CVE-2015-7853 - CVSS 9.8 (critical), 2017-08-07: The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a…
CVE-2015-7871 - CVSS 9.8 (critical), 2017-08-07: Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.
CVE-2016-9841 - CVSS 9.8 (critical), 2017-05-23: inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVE-2017-5638 - CVSS 9.8 (critical), 2017-03-11: The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation…
CVE-2016-10165 - CVSS 7.1 (high), 2017-02-03: The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an…
CVE-2016-2518 - CVSS 5.3 (medium), 2017-01-30: The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer…
CVE-2015-7977 - CVSS 5.9 (medium), 2017-01-30: ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
CVE-2015-7973 - CVSS 6.5 (medium), 2017-01-30: NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the…
CVE-2015-7848 - CVSS 7.5 (high), 2017-01-06: An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The…
CVE-2016-5195 - CVSS 7 (high), 2016-11-10: Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a…
CVE-2016-3427 - CVSS 9.8 (critical), 2016-04-21: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect…
CVE-2015-7974 - CVSS 7.7 (high), 2016-01-26: NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote…
CVE-2014-9354 - CVSS 4 (medium), 2015-02-06: NetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via unspecified vectors related to cleartext storage.
CVE-2014-9353 - CVSS 10 (critical), 2015-02-06: NetApp OnCommand Balance before 4.2P2 contains a "default privileged account," which allows remote attackers to gain privileges via unspecified vectors.
CVE-2010-1871 - CVSS 8.8 (high), 2010-08-05: JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression…