Login Request a demo
OI
Product
Oncommand Insight
by Netapp · last CVE Feb 10, 2025
On CISA KEVExploited in the wildRansomware-linked
971
CVEs
8
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities971In the news0Timeline
Severity mix
Critical 37High 118Medium 345Low 0
Severity
All severities500Critical37High118Medium345Low0
Exploitation
On CISA KEV8Exploited in the wild8
Watch

Add Oncommand Insight to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-2768
6.3
1%
Apr 15
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: All versions, or not specified
CVE-2019-2969
6.2
1%
Oct 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs)
Affected: All versions, or not specified
CVE-2017-10356
6.2
1%
Oct 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
Affected: All versions, or not specified
CVE-2023-38359
6.1
1%
Feb 26
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting
Affected: All versions, or not specified
CVE-2022-31160
6.1
3%
Jul 20
jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery
Affected: All versions, or not specified
CVE-2021-39047
6.1
1%
Jun 24
IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting
Affected: All versions, or not specified
CVE-2021-20493
6.1
1%
Dec 3
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting
Affected: All versions, or not specified
CVE-2021-20293
6.1
1%
Jun 10
A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling…
Affected: All versions, or not specified
CVE-2021-2307
6.1
1%
Apr 22
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging)
Affected: All versions, or not specified
CVE-2020-11022
6.1
99%
Apr 29
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e
Affected: All versions, or not specified
CVE-2017-10293
6.1
1%
Oct 19
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc)
Affected: All versions, or not specified
CVE-2021-2417
6.0
2%
Jul 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS)
Affected: All versions, or not specified
CVE-2024-20926
5.9
1%
Jan 16
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting)
Affected: All versions, or not specified
CVE-2023-22053
5.9
1%
Jul 18
Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs)
Affected: All versions, or not specified
CVE-2023-21967
5.9
2%
Apr 18
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)
Affected: All versions, or not specified
CVE-2023-21954
5.9
1%
Apr 18
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
Affected: All versions, or not specified
CVE-2022-21541
5.9
3%
Jul 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
Affected: All versions, or not specified
CVE-2022-21519
5.9
1%
Jul 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: All versions, or not specified
CVE-2021-3629
5.9
1%
May 24
A flaw was found in Undertow
Affected: All versions, or not specified
CVE-2021-3597
5.9
1%
May 24
A flaw was found in undertow
Affected: All versions, or not specified
CVE-2022-21457
5.9
2%
Apr 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin)
Affected: All versions, or not specified
CVE-2022-21352
5.9
1%
Jan 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: All versions, or not specified
CVE-2021-35550
5.9
7%
Oct 20
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)
Affected: All versions, or not specified
CVE-2021-2429
5.9
41%
Jul 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: All versions, or not specified
CVE-2021-2390
5.9
4%
Jul 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: All versions, or not specified
CVE-2021-2389
5.9
8%
Jul 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: All versions, or not specified
CVE-2021-2356
5.9
2%
Jul 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication)
Affected: All versions, or not specified
CVE-2021-3449
5.9
64%
Mar 25
NULL pointer deref in signature_algorithms processing
Affected: All versions, or not specified
CVE-2021-23841
5.9
7%
Feb 16
The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509…
Affected: All versions, or not specified
CVE-2021-2011
5.9
3%
Jan 20
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)
Affected: All versions, or not specified
CVE-2020-1971
5.9
7%
Dec 8
The X.509 GeneralName type is a generic type for representing different types of names
Affected: All versions, or not specified
CVE-2020-13946
5.9
3%
Sep 1
In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or…
Affected: All versions, or not specified
CVE-2020-2804
5.9
3%
Apr 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached)
Affected: All versions, or not specified
CVE-2020-2585
5.9
3%
Jan 15
Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX)
Affected: All versions, or not specified
CVE-2020-2574
5.9
4%
Jan 15
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)
Affected: All versions, or not specified
CVE-2020-2573
5.9
3%
Jan 15
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)
Affected: All versions, or not specified
CVE-2019-1559
5.9
17%
Feb 27
0-byte record padding oracle
Affected: All versions, or not specified
CVE-2018-3144
5.9
4%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit)
Affected: All versions, or not specified
CVE-2018-2973
5.9
5%
Jul 18
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE)
Affected: All versions, or not specified
CVE-2018-2761
5.9
4%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)
Affected: All versions, or not specified
CVE-2016-0762
5.9
8%
Aug 10
The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied…
Affected: All versions, or not specified
CVE-2017-10135
5.9
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE)
Affected: All versions, or not specified
CVE-2024-21015
5.5
1%
Apr 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)
Affected: All versions, or not specified
CVE-2024-20969
5.5
1%
Jan 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL)
Affected: All versions, or not specified
CVE-2024-20967
5.5
1%
Jan 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication)
Affected: All versions, or not specified
CVE-2023-21929
5.5
1%
Apr 18
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL)
Affected: All versions, or not specified
CVE-2021-39045
5.5
0%
Sep 1
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain information due to the autocomplete feature on password input fields
Affected: All versions, or not specified
CVE-2021-39009
5.5
0%
Sep 1
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear text which can be read by a local privileged user
Affected: All versions, or not specified
CVE-2022-21528
5.5
2%
Jul 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: All versions, or not specified
CVE-2022-21527
5.5
2%
Jul 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: All versions, or not specified
Page 7 of 10 · 500 total
1…678…10
The 500 most important CVEs for this product (exploited first, then by severity)