OI
Product
Oncommand Insight
On CISA KEVExploited in the wildRansomware-linked
971
CVEs
8
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 37High 118Medium 345Low 0
Watch
Add Oncommand Insight to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4730 | 7.1 | Jun 1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: All versions, or not specified |
| CVE-2018-3064 | 7.1 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified |
| CVE-2018-2562 | 7.1 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition) Affected: All versions, or not specified |
| CVE-2017-10309 | 7.1 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified |
| CVE-2017-10125 | 7.1 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified |
| CVE-2016-10165 | 7.1 | Feb 3 | The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted… Affected: All versions, or not specified |
| CVE-2021-35567 | 6.8 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2021-2046 | 6.8 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure) Affected: All versions, or not specified |
| CVE-2020-2601 | 6.8 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: All versions, or not specified |
| CVE-2017-10274 | 6.8 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: All versions, or not specified |
| CVE-2017-10198 | 6.8 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified |
| CVE-2024-21262 | 6.5 | Oct 15 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC) Affected: All versions, or not specified |
| CVE-2022-34357 | 6.5 | Feb 26 | IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limiting Affected: All versions, or not specified |
| CVE-2024-20985 | 6.5 | Jan 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF) Affected: All versions, or not specified |
| CVE-2024-20977 | 6.5 | Jan 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-20975 | 6.5 | Jan 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-20973 | 6.5 | Jan 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-20963 | 6.5 | Jan 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2024-20961 | 6.5 | Jan 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2023-22095 | 6.5 | Oct 17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2023-22079 | 6.5 | Oct 17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2023-22059 | 6.5 | Oct 17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2023-21946 | 6.5 | Apr 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21635 | 6.5 | Oct 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2022-39408 | 6.5 | Oct 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-39410 | 6.5 | Oct 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-29823 | 6.5 | Sep 1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted… Affected: All versions, or not specified |
| CVE-2021-20468 | 6.5 | Sep 1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted… Affected: All versions, or not specified |
| CVE-2020-4301 | 6.5 | Sep 1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted… Affected: All versions, or not specified |
| CVE-2022-21569 | 6.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21556 | 6.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-29768 | 6.5 | Jun 24 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain sensitive information from the details of the 'Cloud Storage' page for which they should not… Affected: All versions, or not specified |
| CVE-2022-22971 | 6.5 | May 12 | In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack… Affected: All versions, or not specified |
| CVE-2021-38904 | 6.5 | Apr 22 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings Affected: All versions, or not specified |
| CVE-2021-20464 | 6.5 | Apr 22 | IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb attack by a malicious authenticated user Affected: All versions, or not specified |
| CVE-2022-21454 | 6.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin) Affected: All versions, or not specified |
| CVE-2022-21358 | 6.5 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2021-38931 | 6.5 | Dec 9 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user having indirect read… Affected: All versions, or not specified |
| CVE-2021-29716 | 6.5 | Dec 3 | IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user should only be allowed to view Affected: All versions, or not specified |
| CVE-2021-35607 | 6.5 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2021-35597 | 6.5 | Oct 20 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: All versions, or not specified |
| CVE-2021-2481 | 6.5 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-20461 | 6.5 | Jun 30 | IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configuration setting Affected: All versions, or not specified |
| CVE-2019-4471 | 6.5 | Jun 1 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for a sensitive cookie in an HTTPS… Affected: All versions, or not specified |
| CVE-2021-2298 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-2202 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: All versions, or not specified |
| CVE-2021-2178 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: All versions, or not specified |
| CVE-2021-2172 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2021-2024 | 6.5 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-2020 | 6.5 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)