CVE-2016-3063

—

CVSS 3.0

7.5 high

EPSS

1%p66

Published

Feb 7, 2017 (Feb 7, 2017)

Modified

Jun 17, 2026

Description

Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authenticated users to execute arbitrary API calls via unspecified vectors.

Vendors: netapp
Products: oncommand system manager
Weakness: CWE-116
Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.