OI
Product
Oncommand Insight
On CISA KEVExploited in the wildRansomware-linked
971
CVEs
8
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 37High 118Medium 345Low 0
Watch
Add Oncommand Insight to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-14593 | 7.4 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: All versions, or not specified |
| CVE-2022-1292 | 7.3 | May 3 | The c_rehash script allows command injection Affected: All versions, or not specified |
| CVE-2022-21600 | 7.2 | Oct 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-2144 | 7.2 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: All versions, or not specified |
| CVE-2020-14828 | 7.2 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2020-14697 | 7.2 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: All versions, or not specified |
| CVE-2020-14678 | 7.2 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: All versions, or not specified |
| CVE-2020-14663 | 7.2 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: All versions, or not specified |
| CVE-2022-21351 | 7.1 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21278 | 7.1 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-35610 | 7.1 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-10771 | 7.1 | Jun 2 | A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests Affected: All versions, or not specified |
| CVE-2019-4730 | 7.1 | Jun 1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: All versions, or not specified |
| CVE-2018-3064 | 7.1 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified |
| CVE-2018-2562 | 7.1 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition) Affected: All versions, or not specified |
| CVE-2017-10309 | 7.1 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified |
| CVE-2017-10125 | 7.1 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified |
| CVE-2016-10165 | 7.1 | Feb 3 | The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)