NTAP-20160421-0001 — April 2016 MySQL Vulnerabilities in Multiple NetApp Products

CVEs in this advisory

• CVE-2016-0705 · site index
• CVE-2016-0639 · site index
• CVE-2015-3194 · site index
• CVE-2016-0640 · site index
• CVE-2016-0641 · site index
• CVE-2016-2047 · site index
• CVE-2016-0642 · site index
• CVE-2016-0643 · site index
• CVE-2016-0644 · site index
• CVE-2016-0646 · site index
• CVE-2016-0647 · site index
• CVE-2016-0648 · site index
• CVE-2016-0649 · site index
• CVE-2016-0650 · site index
• CVE-2016-0652 · site index
• CVE-2016-0653 · site index
• CVE-2016-0654 · site index
• CVE-2016-0655 · site index
• CVE-2016-0656 · site index
• CVE-2016-0657 · site index
• CVE-2016-0658 · site index
• CVE-2016-0651 · site index
• CVE-2016-0659 · site index
• CVE-2016-0661 · site index
• CVE-2016-0662 · site index
• CVE-2016-0663 · site index
• CVE-2016-0665 · site index
• CVE-2016-0666 · site index
• CVE-2016-0667 · site index
• CVE-2016-0668 · site index

Affected products

• OnCommand Balance
• OnCommand Insight
• OnCommand Performance Manager (Unified Manager Performance Pkg)
• OnCommand Unified Manager for Clustered Data ONTAP
• OnCommand Workflow Automation

What to do

1. Check your ONTAP versions against the official advisory's affected-versions table.
2. If affected and a fixed release exists, plan the upgrade — see the ONTAP upgrade runbook.
3. If exploitation is listed as "active", treat remediation as urgent and review exposure (management LIFs, ONTAP S3, SnapMirror endpoints).

Related reading

• Common ONTAP problems (FAQ) — plain-language symptoms and fixes
• ONTAP security hardening — baseline lockdown guidance
• Ransomware protection on ONTAP — SnapLock, SnapMirror vaulting, Anomaly Detection
• ONTAP error messages index — EMS/WAFL/NFS/SnapMirror messages

Browse all ONTAP CVEs → · Security hub