Approved changes feed: RSS · Atom

cpe:2.3:a:netapp:oncommand_insight:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetapp (f19678f6-cb27-5a55-8852-34b249f80ef9)
ProductOncommand Insight (2d1fd53e-295e-5d0c-b398-55dc72d47d3b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-35009 vulnerable 2026-06-08 06:06:26.368757 IBM Cognos Analytics information disclosure
MEDIUM (5.3)
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a remote attacker to obtain system information without authentication which could be used in reconnaissance to gather information that could be used for future attacks. IBM X-Force ID: 257703.
Published: 2023-08-16T22:44:27.127Z
Updated: 2025-02-13T16:55:44.503Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38733 vulnerable 2026-06-08 05:47:16.949015 Details available
OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerability in the Data Warehouse component.
Published: 2022-12-20T00:00:00.000Z
Updated: 2025-04-16T18:35:31.486Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2097 vulnerable 2026-06-08 05:42:50.267733 AES OCB fails to encrypt some bytes
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).
Published: 2022-07-05T10:30:13.658Z
Updated: 2024-09-17T01:06:49.390Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10719 vulnerable 2026-06-08 05:16:35.730304 Details available
MEDIUM (6.5)
A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.
Published: 2020-05-26T14:57:51.000Z
Updated: 2024-08-04T11:14:14.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7317 vulnerable 2026-06-08 05:14:14.275820 Details available
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
Published: 2019-02-04T07:00:00.000Z
Updated: 2026-05-28T18:24:45.126Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5498 vulnerable 2026-06-08 05:13:59.397713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5496 vulnerable 2026-06-08 05:13:59.393572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3082 vulnerable 2026-06-08 05:11:38.627614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5600 vulnerable 2026-06-08 05:09:47.316359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-13652 vulnerable 2026-06-08 05:08:48.684918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.