OI
Product
Oncommand Insight
On CISA KEVExploited in the wildRansomware-linked
971
CVEs
8
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 37High 118Medium 345Low 0
Watch
Add Oncommand Insight to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-21509 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21479 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21478 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21459 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21440 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21425 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: All versions, or not specified |
| CVE-2021-22570 | 5.5 | Jan 26 | Nullptr dereference when a null char is present in a proto symbol Affected: All versions, or not specified |
| CVE-2022-21378 | 5.5 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21367 | 5.5 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling) Affected: All versions, or not specified |
| CVE-2022-21301 | 5.5 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2021-38926 | 5.5 | Dec 9 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privileges due to allowing modification of… Affected: All versions, or not specified |
| CVE-2021-35612 | 5.5 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-35604 | 5.5 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2021-3522 | 5.5 | Jun 2 | GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags Affected: All versions, or not specified |
| CVE-2021-2304 | 5.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure) Affected: All versions, or not specified |
| CVE-2020-14651 | 5.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles) Affected: All versions, or not specified |
| CVE-2020-14643 | 5.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles) Affected: All versions, or not specified |
| CVE-2020-2760 | 5.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2019-2991 | 5.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2018-3247 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge) Affected: All versions, or not specified |
| CVE-2018-3195 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: All versions, or not specified |
| CVE-2018-3187 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2018-3185 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified |
| CVE-2018-2812 | 5.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2017-1784 | 5.5 | Jan 29 | IBM Cognos Analytics 11.0 could produce results in temporary files that contain highly sensitive information that can be read by a local user Affected: All versions, or not specified |
| CVE-2023-43051 | 5.4 | Feb 26 | IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting Affected: All versions, or not specified |
| CVE-2021-38946 | 5.4 | Apr 22 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting Affected: All versions, or not specified |
| CVE-2021-38903 | 5.4 | Apr 22 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input Affected: All versions, or not specified |
| CVE-2021-38909 | 5.4 | Dec 3 | IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting Affected: All versions, or not specified |
| CVE-2021-29867 | 5.4 | Dec 3 | IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they should not have access to Affected: All versions, or not specified |
| CVE-2020-4354 | 5.4 | Jun 1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting Affected: All versions, or not specified |
| CVE-2019-4653 | 5.4 | Jun 1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting Affected: All versions, or not specified |
| CVE-2021-29489 | 5.4 | May 5 | Highcharts JS is a JavaScript charting library based on SVG Affected: All versions, or not specified |
| CVE-2020-4051 | 5.4 | Jun 15 | In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to… Affected: All versions, or not specified |
| CVE-2019-4342 | 5.4 | Sep 17 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting Affected: All versions, or not specified |
| CVE-2018-1413 | 5.4 | May 7 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting Affected: All versions, or not specified |
| CVE-2024-20994 | 5.3 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema) Affected: All versions, or not specified |
| CVE-2023-30996 | 5.3 | Feb 26 | IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins Affected: All versions, or not specified |
| CVE-2023-21971 | 5.3 | Apr 18 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J) Affected: All versions, or not specified |
| CVE-2023-21939 | 5.3 | Apr 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: All versions, or not specified |
| CVE-2022-21628 | 5.3 | Oct 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server) Affected: All versions, or not specified |
| CVE-2022-21618 | 5.3 | Oct 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS) Affected: All versions, or not specified |
| CVE-2022-21626 | 5.3 | Oct 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: All versions, or not specified |
| CVE-2022-21549 | 5.3 | Jul 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21540 | 5.3 | Jul 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified |
| CVE-2022-2097 | 5.3 | Jul 5 | AES OCB fails to encrypt some bytes Affected: 0 |
| CVE-2022-22970 | 5.3 | May 12 | In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data… Affected: All versions, or not specified |
| CVE-2022-21496 | 5.3 | Apr 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI) Affected: All versions, or not specified |
| CVE-2022-21434 | 5.3 | Apr 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21426 | 5.3 | Apr 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)