CVE-2017-7236

7.5 highEPSS 1.8%

High (7.5) in netapp oncommand unified manager core package. EPSS 1.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2017-05-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netapp:oncommand_unified_manager_core_package

References

https://kb.netapp.com/support/s/article/NTAP-20170517-0001
https://kb.netapp.com/support/s/article/NTAP-20170517-0001

Check your stack JSON