CVE-2019-17276

published 2020-03-24

CVE-2019-17276: OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow an…

medium 5.4 CVSS 3.1

AV N AC L PR L UI R S C C L I L A N

OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow an authenticated attacker to inject arbitrary scripts into the SNMP Community Names label field.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
netapp	oncommand_system_manager	—	—
netapp	oncommand_system_manager	—	—

CWE-79