Vulnerability Details CVE-2019-5503
                OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.
                
                    Exploit prediction scoring system (EPSS) score
                    
                        
                            EPSS Score 0.005
                        
                    
                    
                        
                            EPSS Ranking 65.3%
                        
                    
                 
                
                    CVSS Severity
                    
                        
                            CVSS v3 Score 5.3
                        
                    
                    
                        
                            CVSS v2 Score 5.0
                        
                    
                 
                
                
                
                    
                
                
                    
                        Products affected by CVE-2019-5503
                        
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:netapp:oncommand_workflow_automation:5.0