# Netapp Oncommand Unified Manager


- [CVE-2016-3427](https://insights.sbomify.com/CVE-2016-3427/): Oracle Java SE and JRockit Unspecified (critical 9.8, exploited in the wild)
- [CVE-2010-1871](https://insights.sbomify.com/CVE-2010-1871/): Red Hat Linux JBoss Seam 2 Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2019-0211](https://insights.sbomify.com/CVE-2019-0211/): Apache HTTP Server Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2019-5482](https://insights.sbomify.com/CVE-2019-5482/): Memory corruption in curl (critical 9.8)
- [CVE-2019-9898](https://insights.sbomify.com/CVE-2019-9898/): Weak cryptography in n/a (critical 9.8)
- [CVE-2017-7657](https://insights.sbomify.com/CVE-2017-7657/): Critical severity vulnerability that affects org.eclipse.jetty:jetty-server (critical 9.8)
- [CVE-2018-5487](https://insights.sbomify.com/CVE-2018-5487/): Code injection in OnCommand Unified Manager for Linux (critical 9.8)
- [CVE-2018-8014](https://insights.sbomify.com/CVE-2018-8014/): The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins (critical 9.8)
- [CVE-2015-7705](https://insights.sbomify.com/CVE-2015-7705/): Denial of service in n/a (critical 9.8)
- [CVE-2015-7853](https://insights.sbomify.com/CVE-2015-7853/): Integer overflow in n/a (critical 9.8)
- [CVE-2015-7871](https://insights.sbomify.com/CVE-2015-7871/): Auth bypass in n/a (critical 9.8)
- [CVE-2017-3167](https://insights.sbomify.com/CVE-2017-3167/): Auth bypass in Apache HTTP Server (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/netapp/oncommand-unified-manager/