Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2017-10-19	CVE-2017-10295	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). network high complexity oracle debian redhat netapp	4.0
2017-10-19	CVE-2017-10293	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). network oracle netapp	5.8
2017-10-19	CVE-2017-10286	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). network high complexity oracle netapp mariadb	4.4
2017-10-19	CVE-2017-10281	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). network low complexity oracle debian redhat netapp	5.3
2017-10-19	CVE-2017-10274	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). network high complexity oracle debian redhat netapp	6.8
2017-10-19	CVE-2017-10268	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). local high complexity oracle debian redhat mariadb netapp	4.1
2017-09-01	CVE-2017-14053	Information Exposure vulnerability in Netapp Oncommand Unified Manager FOR Clustered Data Ontap NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session. network low complexity netapp CWE-200	5.0
2017-09-01	CVE-2017-12423	Unspecified vulnerability in Netapp Clustered Data Ontap NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines (SVMs) via unspecified vectors. network low complexity netapp	4.0
2017-09-01	CVE-2017-12421	Unspecified vulnerability in Netapp Clustered Data Ontap NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the storage controller via unspecified vectors. network low complexity netapp	6.5
2017-09-01	CVE-2016-1895	Use of Externally-Controlled Format String vulnerability in Netapp Data Ontap NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related to unsafe user input string handling. network low complexity netapp CWE-134	4.0