CVE-2020-8174: Netapp Active Iq Unified Manager

High severity, CVSS 8.1. EPSS: 7.6% chance of exploitation in the next 30 days.

napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.

Affected products

• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Oncommand Insight: affected versions not specified
• Netapp Oncommand Workflow Automation: affected versions not specified
• Netapp Snapcenter: affected versions not specified
• Node.js Node.js: before 10.21.0 (fixed in 10.21.0); from 12.0.0, before 12.18.0 (fixed in 12.18.0); from 14.0.0, before 14.4.0 (fixed in 14.4.0)
• Oracle Banking Extensibility Workbench: version 14.3.0 only; version 14.4.0 only
• Oracle Blockchain Platform: before 21.1.2 (fixed in 21.1.2)
• Oracle MySQL Cluster: up to and including 7.3.30; from 7.4.0, up to and including 7.4.29; from 7.5.0, up to and including 7.5.19; from 7.6.0, up to and including 7.6.15; from 8.0.0, up to and including 8.0.21
• Oracle Retail Xstore Point Of Service: version 16.0.6 only; version 17.0.4 only; version 18.0.3 only; version 19.0.2 only; version 20.0.1 only

Published 2020-07-24. Last modified 2026-06-17.