Approved changes feed: RSS · Atom

cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:linux:*:*

part: a version: - update: *

VendorNetapp (f19678f6-cb27-5a55-8852-34b249f80ef9)
ProductOncommand Performance Manager (3f2fb370-917d-58be-88d3-69ebe06b70d8)
Edition*
Language*
Software edition*
Target softwarelinux
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7525 vulnerable 2026-06-08 05:09:56.416484 Details available
A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.
Published: 2018-02-06T15:00:00.000Z
Updated: 2024-09-17T02:21:29.302Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15095 vulnerable 2026-06-08 05:08:57.846208 Details available
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.
Published: 2018-02-06T15:00:00.000Z
Updated: 2024-09-16T22:57:07.488Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.