CVE-2017-15518: Netapp Oncommand API Services

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 log a privileged database user account password. All users are urged to move to a fixed version. Since the affected password is changed during every upgrade/installation no further action is required.

Affected products

• Netapp Oncommand API Services: up to and including 2.0
• Netapp Service Level Manager: up to and including 1.0; version 1.0 only

Published 2018-02-23. Last modified 2026-06-17.