What’s Vulnerable › Vulnerabilities

CVE-2019-17276

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-03-24 · updated 2026-06-17
• Weakness: CWE-79

Description

OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow an authenticated attacker to inject arbitrary scripts into the SNMP Community Names label field.

Affected products

• OnCommand System Manager 9.x: 9.3, 9.4

References

• https://security.netapp.com/advisory/ntap-20200323-0001/
• https://security.netapp.com/advisory/ntap-20200323-0001/

Get alerted when CVE-2019-17276 or the next vulnerability affects your stack