# Netapp Oncommand Shift


- [CVE-2016-8735](https://insights.sbomify.com/CVE-2016-8735/): Apache Tomcat Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2016-3427](https://insights.sbomify.com/CVE-2016-3427/): Oracle Java SE and JRockit Unspecified (critical 9.8, exploited in the wild)
- [CVE-2017-12617](https://insights.sbomify.com/CVE-2017-12617/): Apache Tomcat Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2017-12615](https://insights.sbomify.com/CVE-2017-12615/): Apache Tomcat on Windows Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2017-15095](https://insights.sbomify.com/CVE-2017-15095/): jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution (critical 9.8)
- [CVE-2017-7525](https://insights.sbomify.com/CVE-2017-7525/): jackson-databind is vulnerable to a deserialization flaw (critical 9.8)
- [CVE-2017-17485](https://insights.sbomify.com/CVE-2017-17485/): jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass (critical 9.8)
- [CVE-2016-9841](https://insights.sbomify.com/CVE-2016-9841/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-10285](https://insights.sbomify.com/CVE-2017-10285/): Code injection in Java (critical 9.6)
- [CVE-2017-10346](https://insights.sbomify.com/CVE-2017-10346/): Code injection in Java (critical 9.6)
- [CVE-2017-10086](https://insights.sbomify.com/CVE-2017-10086/): Code injection in Java (critical 9.6)
- [CVE-2017-10087](https://insights.sbomify.com/CVE-2017-10087/): Code injection in Java (critical 9.6)

---
From sbomify Insights: https://insights.sbomify.com/products/netapp/oncommand-shift/