Oncommand Performance Manager (Netapp) - vulnerabilities (CVEs)

73 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2018-02-06. Vendor: Netapp.

CVEs of Oncommand Performance Manager

• CVE-2017-15095 - CVSS 9.8 (critical), 2018-02-06: A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code…
• CVE-2017-7525 - CVSS 9.8 (critical), 2018-02-06: A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to…
• CVE-2017-10379 - CVSS 6.5 (medium), 2017-10-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.57 and earlier,…
• CVE-2017-10378 - CVSS 6.5 (medium), 2017-10-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.57 and earlier,…
• CVE-2017-10388 - CVSS 7.5 (high), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161,…
• CVE-2017-10384 - CVSS 6.5 (medium), 2017-10-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37…
• CVE-2017-10347 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161,…
• CVE-2017-10350 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151,…
• CVE-2017-10357 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE:…
• CVE-2017-10346 - CVSS 9.6 (critical), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161,…
• CVE-2017-10349 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161,…
• CVE-2017-10356 - CVSS 6.2 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
• CVE-2017-10348 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161,…
• CVE-2017-10355 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java…
• CVE-2017-10365 - CVSS 3.8 (low), 2017-10-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.18 and earlier.…
• CVE-2017-10345 - CVSS 3.1 (low), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
• CVE-2017-10320 - CVSS 4.9 (medium), 2017-10-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.19 and earlier.…
• CVE-2017-10286 - CVSS 4.4 (medium), 2017-10-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.37 and earlier and…
• CVE-2017-10309 - CVSS 7.1 (high), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily…
• CVE-2017-10285 - CVSS 9.6 (critical), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161,…
• CVE-2017-10295 - CVSS 4 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java…
• CVE-2017-10281 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
• CVE-2017-10293 - CVSS 6.1 (medium), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9.…
• CVE-2017-10274 - CVSS 6.8 (medium), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144…
• CVE-2017-10268 - CVSS 4.1 (medium), 2017-10-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.57 and earlier,…
• CVE-2017-10243 - CVSS 6.5 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE:…
• CVE-2017-10198 - CVSS 6.8 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
• CVE-2017-10193 - CVSS 3.1 (low), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151,…
• CVE-2017-10176 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
• CVE-2017-10135 - CVSS 5.9 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
• CVE-2017-10125 - CVSS 7.1 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131.…
• CVE-2017-10101 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151,…
• CVE-2017-10107 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141…
• CVE-2017-10110 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily…
• CVE-2017-10115 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
• CVE-2017-10096 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151,…
• CVE-2017-10105 - CVSS 4.3 (medium), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
• CVE-2017-10109 - CVSS 5.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
• CVE-2017-10114 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult…
• CVE-2017-10118 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
• CVE-2017-10102 - CVSS 9 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141…
• CVE-2017-10108 - CVSS 5.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
• CVE-2017-10111 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE:…
• CVE-2017-10116 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
• CVE-2017-10089 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
• CVE-2017-10078 - CVSS 8.1 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java SE: 8u131. Easily…
• CVE-2017-10087 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151,…
• CVE-2017-10074 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151,…
• CVE-2017-10086 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily…
• CVE-2017-10090 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141…
• CVE-2017-10067 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
• CVE-2017-10081 - CVSS 4.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151,…
• CVE-2017-10053 - CVSS 5.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE:…
• CVE-2015-7704 - CVSS 7.5 (high), 2017-08-07: The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.
• CVE-2015-7850 - CVSS 6.5 (medium), 2017-08-07: ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing…
• CVE-2015-7854 - CVSS 8.8 (high), 2017-08-07: Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a…
• CVE-2015-7691 - CVSS 7.5 (high), 2017-08-07: The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted…
• CVE-2015-7702 - CVSS 6.5 (medium), 2017-08-07: The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This…
• CVE-2015-7849 - CVSS 8.8 (high), 2017-08-07: Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code…
• CVE-2015-7853 - CVSS 9.8 (critical), 2017-08-07: The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a…
• CVE-2015-7871 - CVSS 9.8 (critical), 2017-08-07: Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.
• CVE-2015-7701 - CVSS 7.5 (high), 2017-08-07: Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service…
• CVE-2015-7705 - CVSS 9.8 (critical), 2017-08-07: The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted…
• CVE-2015-7852 - CVSS 5.9 (medium), 2017-08-07: ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.
• CVE-2015-7855 - CVSS 6.5 (medium), 2017-08-07: The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion…
• CVE-2015-7692 - CVSS 7.5 (high), 2017-08-07: The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This…
• CVE-2015-7703 - CVSS 7.5 (high), 2017-07-24: The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration,…
• CVE-2016-9841 - CVSS 9.8 (critical), 2017-05-23: inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
• CVE-2016-10165 - CVSS 7.1 (high), 2017-02-03: The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an…
• CVE-2016-2518 - CVSS 5.3 (medium), 2017-01-30: The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer…
• CVE-2015-7848 - CVSS 7.5 (high), 2017-01-06: An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The…
• CVE-2016-5195 - CVSS 7 (high), 2016-11-10: Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a…
• CVE-2016-3427 - CVSS 9.8 (critical), 2016-04-21: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect…