Oncommand Shift (Netapp) - vulnerabilities (CVEs)

64 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2018-02-06. Vendor: Netapp.

CVEs of Oncommand Shift

CVE-2017-7525 - CVSS 9.8 (critical), 2018-02-06: A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to…
CVE-2017-15095 - CVSS 9.8 (critical), 2018-02-06: A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code…
CVE-2018-5968 - CVSS 8.1 (high), 2018-01-22: FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the…
CVE-2018-2638 - CVSS 8.3 (high), 2018-01-18: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u152 and 9.0.1.…
CVE-2018-2627 - CVSS 7.5 (high), 2018-01-18: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java SE: 8u152 and 9.0.1.…
CVE-2018-2581 - CVSS 4.7 (medium), 2018-01-18: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1.…
CVE-2017-17485 - CVSS 9.8 (critical), 2018-01-10: FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the…
CVE-2017-10388 - CVSS 7.5 (high), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10346 - CVSS 9.6 (critical), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10349 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10356 - CVSS 6.2 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
CVE-2017-10348 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10355 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java…
CVE-2017-10347 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10350 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151,…
CVE-2017-10357 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE:…
CVE-2017-10345 - CVSS 3.1 (low), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
CVE-2017-10281 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
CVE-2017-10295 - CVSS 4 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java…
CVE-2017-10293 - CVSS 6.1 (medium), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9.…
CVE-2017-10285 - CVSS 9.6 (critical), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10309 - CVSS 7.1 (high), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily…
CVE-2017-10274 - CVSS 6.8 (medium), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144…
CVE-2017-12617 - CVSS 8.1 (high), 2017-10-04: When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the…
CVE-2017-12615 - CVSS 8.1 (high), 2017-09-19: When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false)…
CVE-2016-6796 - CVSS 7.5 (high), 2017-08-11: A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able…
CVE-2016-6797 - CVSS 7.5 (high), 2017-08-10: The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not…
CVE-2016-5018 - CVSS 9.1 (critical), 2017-08-10: In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass…
CVE-2016-0762 - CVSS 5.9 (medium), 2017-08-10: The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not…
CVE-2016-6794 - CVSS 5.3 (medium), 2017-08-10: When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat…
CVE-2017-10243 - CVSS 6.5 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE:…
CVE-2017-10198 - CVSS 6.8 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
CVE-2017-10193 - CVSS 3.1 (low), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10176 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
CVE-2017-10135 - CVSS 5.9 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
CVE-2017-10125 - CVSS 7.1 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131.…
CVE-2017-10116 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
CVE-2017-10101 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10107 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141…
CVE-2017-10110 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily…
CVE-2017-10115 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
CVE-2017-10096 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10105 - CVSS 4.3 (medium), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
CVE-2017-10109 - CVSS 5.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
CVE-2017-10114 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult…
CVE-2017-10118 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
CVE-2017-10102 - CVSS 9 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141…
CVE-2017-10108 - CVSS 5.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
CVE-2017-10111 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE:…
CVE-2017-10081 - CVSS 4.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10089 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
CVE-2017-10078 - CVSS 8.1 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java SE: 8u131. Easily…
CVE-2017-10087 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10074 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10086 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily…
CVE-2017-10090 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141…
CVE-2017-10067 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
CVE-2017-10053 - CVSS 5.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE:…
CVE-2016-9841 - CVSS 9.8 (critical), 2017-05-23: inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVE-2016-8735 - CVSS 9.8 (critical), 2017-04-06: Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if…
CVE-2016-8747 - CVSS 7.5 (high), 2017-03-14: An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations.…
CVE-2016-10165 - CVSS 7.1 (high), 2017-02-03: The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an…
CVE-2015-8960 - CVSS 8.1 (high), 2016-09-21: The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not…
CVE-2016-3427 - CVSS 9.8 (critical), 2016-04-21: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect…