CVE-2017-7236: Netapp Oncommand Unified Manager Core Package

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• Netapp Oncommand Unified Manager Core Package: version 5.0 only; version 5.0.1 only; version 5.0.2 only; version 5.1 only; version 5.2 only; version 5.2.1 only; …

Published 2017-05-26. Last modified 2026-06-17.