CVE-2016-3063
HighSummary
Multiple functions in NetApp OnCommand System Manager before version 8.3.2 do not properly escape special characters, allowing remote authenticated users to execute arbitrary API calls via unspecified vectors.
Risk Assessment
This vulnerability may lead to unauthorized access to system functions, posing a risk to the integrity and confidentiality of data within the organization.
Recommendation
It is recommended to update NetApp OnCommand System Manager to version 8.3.2 or later to mitigate this vulnerability.
Other vulnerabilities in NetApp OnCommand System Manager
See all- CVE-2016-5045High
NetApp OnCommand System Manager before version 9.0 allows remote attackers to obtain sensitive credentials via vectors related to cluster peering setup.
- CVE-2015-8322High
NetApp OnCommand System Manager 8.3.x before 8.3.2 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Original NVD description (English source)
Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authenticated users to execute arbitrary API calls via unspecified vectors.