CVE-2017-7236

High

Published: 26/05/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Risk Assessment

Attackers may gain access to sensitive data or compromise database integrity, leading to serious consequences for the organization.

Recommendation

It is recommended to upgrade to version 5.2.2P1 or later to mitigate the risk associated with this vulnerability.

Other vulnerabilities in NetApp OnCommand Unified Manager Core Package 5.x

CVE-2017-7439High
NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 might allow remote attackers to obtain sensitive information via error messages.

Original NVD description (English source)

SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.