Netapp Oncommand Insight vulnerabilities

CVE-2022-38733 [HIGH] CVE-2022-38733: OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerab OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerability in the Data Warehouse component.

CVE-2020-10719 [MEDIUM] CWE-444 CVE-2020-10719: A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTT A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.

CVE-2019-5498 [MEDIUM] CVE-2019-5498: OnCommand Insight versions through 7.3.6 may disclose sensitive account information to an authentica OnCommand Insight versions through 7.3.6 may disclose sensitive account information to an authenticated user.

CVE-2019-5496 [HIGH] CWE-319 CVE-2019-5496: Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured w Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

CVE-2019-7317 [MEDIUM] CWE-416 CVE-2019-7317: png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_fu png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

CVE-2017-13652 [MEDIUM] CWE-20 CVE-2017-13652: NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking a NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user interface.

CVE-2017-5600 [CRITICAL] CWE-798 CVE-2017-5600: The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obt The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative access by leveraging a default privileged account.