CVE-2019-5496
No fix known EPSS <1%
Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.
Products: NetApp OnCommand Insight