VULNERABILITY INTELLIGENCE
CVE-2019-5495
CVSS score7.5 HIGH
EPSS probability1.43%
CISA KEVNot currently listed
Published2019-05-10
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.
Primary references
- security-alert@netapp.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory