OI
Product
Oncommand Insight
On CISA KEVExploited in the wildRansomware-linked
971
CVEs
8
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 37High 118Medium 345Low 0
Watch
Add Oncommand Insight to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-25689 | 6.5 | Nov 2 | A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly… Affected: All versions, or not specified |
| CVE-2020-14846 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14836 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14830 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14827 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth) Affected: All versions, or not specified |
| CVE-2020-14800 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2020-14775 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2020-14769 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14765 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS) Affected: All versions, or not specified |
| CVE-2020-5421 | 6.5 | Sep 19 | RFD Protection Bypass via jsessionid Affected: All versions, or not specified |
| CVE-2020-14680 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14619 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: All versions, or not specified |
| CVE-2020-14591 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in) Affected: All versions, or not specified |
| CVE-2020-14576 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF) Affected: All versions, or not specified |
| CVE-2020-14539 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-10719 | 6.5 | May 26 | A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes Affected: before 7.3.13 |
| CVE-2020-2790 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth) Affected: All versions, or not specified |
| CVE-2020-2780 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2020-2686 | 6.5 | Jan 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-2627 | 6.5 | Jan 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: All versions, or not specified |
| CVE-2020-2579 | 6.5 | Jan 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2019-4343 | 6.5 | Dec 30 | IBM Cognos Analytics 11.0 and 11.1 allows overly permissive cross-origin resource sharing which could allow an attacker to transfer private information Affected: All versions, or not specified |
| CVE-2019-3011 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API) Affected: All versions, or not specified |
| CVE-2019-3004 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: All versions, or not specified |
| CVE-2019-2967 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2019-2966 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2019-2946 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS) Affected: All versions, or not specified |
| CVE-2019-2914 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2019-16168 | 6.5 | Sep 9 | In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe… Affected: All versions, or not specified |
| CVE-2019-5498 | 6.5 | Aug 9 | OnCommand Insight versions through 7.3.6 may disclose sensitive account information to an authenticated user Affected: through 7.3.6 |
| CVE-2019-2455 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: All versions, or not specified |
| CVE-2018-3251 | 6.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified |
| CVE-2018-3203 | 6.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2018-3182 | 6.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Affected: All versions, or not specified |
| CVE-2018-3156 | 6.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified |
| CVE-2018-3145 | 6.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: All versions, or not specified |
| CVE-2018-3143 | 6.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified |
| CVE-2018-3137 | 6.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2018-3133 | 6.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: All versions, or not specified |
| CVE-2017-13652 | 6.5 | Jul 31 | NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user… Affected: before 7.2.0; 7.3.0 |
| CVE-2018-3073 | 6.5 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2018-3070 | 6.5 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump) Affected: All versions, or not specified |
| CVE-2018-3065 | 6.5 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Affected: All versions, or not specified |
| CVE-2018-3060 | 6.5 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified |
| CVE-2018-2819 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified |
| CVE-2018-2817 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: All versions, or not specified |
| CVE-2018-2784 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified |
| CVE-2018-2782 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified |
| CVE-2018-2668 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2018-2665 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)