# Netapp Oncommand Balance


- [CVE-2017-5638](https://insights.sbomify.com/CVE-2017-5638/): Apache Struts Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2016-3427](https://insights.sbomify.com/CVE-2016-3427/): Oracle Java SE and JRockit Unspecified (critical 9.8, exploited in the wild)
- [CVE-2010-1871](https://insights.sbomify.com/CVE-2010-1871/): Red Hat Linux JBoss Seam 2 Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-12617](https://insights.sbomify.com/CVE-2017-12617/): Apache Tomcat Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2017-12615](https://insights.sbomify.com/CVE-2017-12615/): Apache Tomcat on Windows Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2017-9805](https://insights.sbomify.com/CVE-2017-9805/): Apache Struts Deserialization of Untrusted Data (high 8.1, exploited in the wild)
- [CVE-2016-5195](https://insights.sbomify.com/CVE-2016-5195/): Linux Kernel Race Condition (high 7.0, exploited in the wild)
- [CVE-2014-9353](https://insights.sbomify.com/CVE-2014-9353/): Hardcoded credentials in n/a (critical 10.0)
- [CVE-2017-15095](https://insights.sbomify.com/CVE-2017-15095/): jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution (critical 9.8)
- [CVE-2017-7525](https://insights.sbomify.com/CVE-2017-7525/): jackson-databind is vulnerable to a deserialization flaw (critical 9.8)
- [CVE-2015-7853](https://insights.sbomify.com/CVE-2015-7853/): Integer overflow in n/a (critical 9.8)
- [CVE-2015-7871](https://insights.sbomify.com/CVE-2015-7871/): Auth bypass in n/a (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/netapp/oncommand-balance/