high7.5
CVE-2016-3063
Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authenticated users to execut…
Impact
Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authenticated users to execute arbitrary API calls via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netapp | Oncommand System Manager | through 8.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://kb.netapp.com/support/s/article/cve-2016-3063-zapi-injection-vulnerability-in-oncommand-system-manager
- https://security.netapp.com/advisory/ntap-20160310-0004/
- https://kb.netapp.com/support/s/article/cve-2016-3063-zapi-injection-vulnerability-in-oncommand-system-manager
- https://security.netapp.com/advisory/ntap-20160310-0004/