OI
Product
Oncommand Insight
On CISA KEVExploited in the wildRansomware-linked
971
CVEs
8
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 37High 118Medium 345Low 0
Watch
Add Oncommand Insight to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-44228 RansomwareIn wildKEV | 10.0 | Dec 10 | Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints Affected: All versions, or not specified |
| CVE-2016-8735 In wildKEV | 9.8 | Apr 6 | Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if… Affected: All versions, or not specified |
| CVE-2016-3427 In wildKEV | 9.8 | Apr 21 | Oracle Java SE and JRockit Unspecified Vulnerability Affected: All versions, or not specified |
| CVE-2023-41993 In wildKEV | 8.8 | Sep 21 | Apple Multiple Products WebKit Code Execution Vulnerability Affected: 0 |
| CVE-2010-1871 In wildKEV | 8.8 | Aug 4 | Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2018-11776 In wildKEV | 8.1 | Aug 22 | Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like… Affected: All versions, or not specified |
| CVE-2017-12617 In wildKEV | 8.1 | Oct 3 | When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g Affected: All versions, or not specified |
| CVE-2020-11023 In wildKEV | 6.1 | Apr 29 | Potential XSS vulnerability in jQuery Affected: All versions, or not specified |
Showing 8
The 500 most important CVEs for this product (exploited first, then by severity)