CVE-2019-5496

7.5 highEPSS 0.7%

High (7.5) in netapp oncommand insight. EPSS 0.7% chance of exploitation in the next 30 days.

Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2019-05-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netapp:oncommand_insight

References

https://security.netapp.com/advisory/ntap-20190509-0005/
https://security.netapp.com/advisory/ntap-20190509-0005/

Check your stack JSON