CVE-2020-8585: Netapp Oncommand Unified Manager

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link (plink).

Affected products

• Netapp Oncommand Unified Manager: before 5.2.5 (fixed in 5.2.5)

Published 2021-01-28. Last modified 2026-06-17.