NetApp OnCommand Unified Manager

productDE

cpe:/a:netapp:oncommand_unified_manager:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

9critical16high17medium2low

updated 2026-10-28

vulnerabilities (44)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-3427US	critical9.8OT critical	92.3% (100th)	KEV	no fix	2016-04-21	—
CVE-2016-2183US	high7.5OT high	94.7% (100th)	Exploit	no fix	2016-09-01	—
CVE-2016-0800US	medium5.9	82.1% (100th)	Exploit	no fix	2016-03-01	—
CVE-2017-17485US	critical9.8	49.7% (99th)	Exploit	no fix	2018-01-10	—
CVE-2018-5391US	high7.5	32.4% (98th)	Exploit	no fix	2018-09-06	—
CVE-2016-6304US	high7.5	63.0% (99th)	—	no fix	2016-09-26	—
CVE-2016-2177US	critical9.8	44.5% (99th)	—	no fix	2016-06-20	—
CVE-2016-2182US	critical9.8	44.2% (99th)	—	no fix	2016-09-16	—
CVE-2016-6306US	medium5.9	41.7% (99th)	—	no fix	2016-09-26	—
CVE-2016-6303US	critical9.8	32.0% (98th)	—	no fix	2016-09-16	—
CVE-2016-2180US	high7.5	30.0% (98th)	—	no fix	2016-08-01	—
CVE-2016-6302US	high7.5	27.8% (98th)	—	no fix	2016-09-16	—
CVE-2016-2179US	high7.5	26.6% (98th)	—	no fix	2016-09-16	—
CVE-2016-2181US	high7.5	22.6% (98th)	—	no fix	2016-09-16	—
CVE-2016-7053US	high7.5	21.7% (98th)	—	no fix	2017-05-04	—
CVE-2016-6305US	high7.5	16.0% (97th)	—	no fix	2016-09-26	—
CVE-2016-6307US	medium5.9	13.8% (97th)	—	no fix	2016-09-26	—
CVE-2017-3738US	medium5.9	13.4% (96th)	—	no fix	2017-12-07	—
CVE-2016-6308US	medium5.9	12.2% (96th)	—	no fix	2016-09-26	—
CVE-2018-0734US	medium5.9OT elevated	12.2% (96th)	—	no fix	2018-10-30	—
CVE-2018-0737US	medium5.9OT elevated	11.6% (96th)	—	no fix	2018-04-16	—
CVE-2017-3736US	medium6.5	10.1% (96th)	—	no fix	2017-11-02	—
CVE-2018-5968US	high8.1	7.25% (94th)	—	no fix	2018-01-22	—
CVE-2017-12174US	high7.5	5.98% (93rd)	—	no fix	2018-03-07	—
CVE-2016-3443US	critical9.6	5.48% (93rd)	—	no fix	2016-04-21	—
CVE-2018-0735US	medium5.9OT elevated	4.72% (92nd)	—	no fix	2018-10-29	—
CVE-2016-0687US	critical9.6	4.72% (92nd)	—	no fix	2016-04-21	—
CVE-2016-0686US	critical9.6	4.72% (92nd)	—	no fix	2016-04-21	—
CVE-2018-2973US	medium5.9	4.67% (92nd)	—	no fix	2018-07-18	—
CVE-2018-2952US	low3.7	4.43% (91st)	—	no fix	2018-07-18	—
CVE-2019-3900US	high7.7	4.35% (91st)	—	no fix	2019-04-25	—
CVE-2016-3449US	high8.3	4.01% (90th)	—	no fix	2016-04-21	—
CVE-2016-3425US	medium4.3	3.80% (90th)	—	no fix	2016-04-21	—
CVE-2018-2972US	medium5.9	3.58% (89th)	—	no fix	2018-07-18	—
CVE-2016-0695US	medium5.9	3.40% (89th)	—	no fix	2016-04-21	—
CVE-2018-2964US	high8.3	3.21% (88th)	—	no fix	2018-07-18	—
CVE-2018-2940US	medium4.3	3.13% (88th)	—	no fix	2018-07-18	—
CVE-2015-7575US	medium5.9	2.90% (87th)	—	no fix	2016-01-09	—
CVE-2016-3422US	medium4.3	2.80% (86th)	—	no fix	2016-04-21	—
CVE-2016-3426US	low3.1	2.79% (86th)	—	no fix	2016-04-21	—
CVE-2018-2941US	high8.3	2.58% (85th)	—	no fix	2018-07-18	—
CVE-2018-2938US	critical9.0	2.07% (81st)	—	no fix	2018-07-18	—
CVE-2018-2942US	high8.3	1.89% (79th)	—	no fix	2018-07-18	—
CVE-2016-2178US	medium5.5	1.24% (69th)	—	no fix	2016-06-20	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-17CWE-175 CVEs
CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-269Improper Privilege Management4 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm4 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-399CWE-3993 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)44 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan