CVE-2020-8587

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-02-08 · updated 2026-06-17

Description

OnCommand System Manager 9.x versions prior to 9.3P20 and 9.4 prior to 9.4P3 are susceptible to a vulnerability that could allow HTTP clients to cache sensitive responses making them accessible to an attacker who has access to the system where the client runs.

Affected products

OnCommand System Manager 9.x: from 9.0 before 9.3; 9.3, 9.4 — fixed in 9.3

How to fix

Upgrade to a fixed version: OnCommand System Manager 9.x 9.3. Check the vendor advisory for mitigations.

References

https://security.netapp.com/advisory/NTAP-20210208-0001/
https://security.netapp.com/advisory/NTAP-20210208-0001/

Get alerted when CVE-2020-8587 or the next vulnerability affects your stack