Netapp Oncommand Cloud Manager vulnerabilities

2 CVEs affecting Netapp Oncommand Cloud Manager, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-17275, published 2020-02-26.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-3427: Oracle Java SE and JRockit Unspecified Vulnerability, published 2016-04-21. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-05-12. EPSS: 92.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via…
• CVE-2019-17275, published 2020-02-26. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers.