CVE-2020-8587: Netapp Oncommand System Manager

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

OnCommand System Manager 9.x versions prior to 9.3P20 and 9.4 prior to 9.4P3 are susceptible to a vulnerability that could allow HTTP clients to cache sensitive responses making them accessible to an attacker who has access to the system where the client runs.

Affected products

• Netapp Oncommand System Manager: from 9.0, before 9.3 (fixed in 9.3); version 9.3 only; version 9.4 only

Published 2021-02-08. Last modified 2026-06-17.