netapp oncommand system manager

Name: netapp oncommand system manager
Brand: netapp

productUS

cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical10high13medium0low

updated 2026-10-28

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-1938US	critical9.8OT critical	99.3% (100th)	KEV	no fix	2020-02-24	3.0.0 → 3.1.3
CVE-2020-11023US	medium6.1OT critical	84.9% (100th)	KEV	no fix	2020-04-29	3.0 → 3.1.3
CVE-2020-11022US	medium6.1	99.2% (100th)	Exploit	no fix	2020-04-29	3.0 → 3.1.3
CVE-2019-11358US	medium6.1	86.8% (100th)	Exploit	no fix	2019-04-20	3.0 → 3.1.3
CVE-2020-13935US	high7.5	86.6% (100th)	Exploit	no fix	2020-07-14	3.0.0 → 3.1.3
CVE-2019-17571US	critical9.8	70.0% (99th)	Exploit	no fix	2019-12-20	3.0 → 3.1.3
CVE-2020-11996US	high7.5	26.7% (98th)	Exploit	no fix	2020-06-26	2 versions
CVE-2020-17527US	high7.5	24.6% (98th)	Exploit	no fix	2020-12-03	3.0.0 → 3.1.3
CVE-2020-7656US	medium6.1	6.43% (94th)	Exploit	no fix	2020-05-19	3.0.0 → 3.1.3
CVE-2013-3320US	medium6.1	2.30% (83rd)	Exploit	2.2	2020-01-29	< 2.2
CVE-2020-13934US	high7.5	64.1% (99th)	—	no fix	2020-07-14	3.0.0 → 3.1.3
CVE-2017-7658US	critical9.8	19.4% (97th)	—	no fix	2018-06-26	3.0 → 3.1.3
CVE-2017-7657US	critical9.8	14.9% (97th)	—	no fix	2018-06-26	= 3.x
CVE-2020-1935US	medium4.8	9.39% (95th)	—	no fix	2020-02-24	3.0.0 → 3.1.3
CVE-2019-17569US	medium4.8	8.87% (95th)	—	no fix	2020-02-24	3.0.0 → 3.1.3
CVE-2020-27218US	medium4.8	8.28% (95th)	—	no fix	2020-11-28	3.0 → 3.1.3
CVE-2019-10247US	medium5.3	5.94% (93rd)	—	no fix	2019-04-22	3.0 → 3.1.3
CVE-2019-10246US	medium5.3	4.09% (91st)	—	no fix	2019-04-22	3.0 → 3.1.3
CVE-2013-3322US	high7.2	3.55% (89th)	—	no fix	2020-01-31	≤ 2.1
CVE-2018-12538US	high8.8	2.65% (86th)	—	no fix	2018-06-22	3.0.0 → 3.1.3
CVE-2016-5047US	medium6.5	2.44% (84th)	—	no fix	2016-09-01	3 versions
CVE-2013-3321US	high7.5	2.25% (83rd)	—	no fix	2020-01-29	≤ 2.1
CVE-2016-5045US	high8.1	1.50% (74th)	—	no fix	2017-07-03	3 versions
CVE-2019-12418US	high7.0	1.22% (69th)	—	no fix	2019-12-23	3.0.0 → 3.1.3
CVE-2016-3063US	high7.5	1.18% (68th)	—	no fix	2017-02-07	≤ 8.3.1
CVE-2019-17276US	medium5.4	0.63% (50th)	—	no fix	2020-03-24	2 versions
CVE-2020-8587US	medium5.5	0.36% (29th)	—	9.3	2021-02-08	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')4 CVEs
CWE-213Exposure of Sensitive Information Due to Incompatible Policies2 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan