What is CVE-2019-5495?

CVE-2019-5495 is a high-severity vulnerability in NetApp Oncommand Unified Manager, classified under CWE-254. CVSS score: 7.5/10. Published 2019-05-10.

How severe is CVE-2019-5495?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in NetApp Oncommand Unified Manager

CVE-2019-5495

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

EPSS: 0.014 (70.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Netapp Oncommand_unified_manager
Netapp Oncommand Unified Manager For Vmware Vsphere,linux And Windows 7.2 Above — versions Versions prior to 9.5

Weakness classification (CWE)

CWE-254

References

security-alert@netapp.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-5495?: CVE-2019-5495 is a high-severity vulnerability in NetApp Oncommand Unified Manager, classified under CWE-254. CVSS score: 7.5/10. Published 2019-05-10.
How severe is CVE-2019-5495?: High severity. CVSS v3 base score is 7.5 out of 10.