OW
Product
Oncommand Workflow Automation
On CISA KEVExploited in the wild
743
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 32High 79Medium 389Low 0
Watch
Add Oncommand Workflow Automation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-0509 | 6.8 | Feb 4 | A security issue was found in Sparkle before version 2.6.4 Affected: All versions, or not specified |
| CVE-2021-35567 | 6.8 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2021-2046 | 6.8 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure) Affected: All versions, or not specified |
| CVE-2020-2601 | 6.8 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: All versions, or not specified |
| CVE-2019-2989 | 6.8 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: All versions, or not specified |
| CVE-2019-2949 | 6.8 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos) Affected: All versions, or not specified |
| CVE-2017-10274 | 6.8 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: All versions, or not specified |
| CVE-2023-21946 | 6.5 | Apr 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-39408 | 6.5 | Oct 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21635 | 6.5 | Oct 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2022-39410 | 6.5 | Oct 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21569 | 6.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21556 | 6.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21358 | 6.5 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2021-43797 | 6.5 | Dec 9 | HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling Affected: All versions, or not specified |
| CVE-2021-2298 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-2202 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: All versions, or not specified |
| CVE-2021-2178 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: All versions, or not specified |
| CVE-2021-2172 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2021-2024 | 6.5 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-2020 | 6.5 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14846 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14836 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14830 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14827 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth) Affected: All versions, or not specified |
| CVE-2020-14800 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2020-14775 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2020-14769 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14765 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS) Affected: All versions, or not specified |
| CVE-2020-14680 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14619 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: All versions, or not specified |
| CVE-2020-14591 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in) Affected: All versions, or not specified |
| CVE-2020-14576 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF) Affected: All versions, or not specified |
| CVE-2020-14539 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-10719 | 6.5 | May 26 | A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes Affected: All versions, or not specified |
| CVE-2020-2790 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth) Affected: All versions, or not specified |
| CVE-2020-2780 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2020-2686 | 6.5 | Jan 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-2627 | 6.5 | Jan 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: All versions, or not specified |
| CVE-2020-2579 | 6.5 | Jan 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2019-3011 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API) Affected: All versions, or not specified |
| CVE-2019-3004 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: All versions, or not specified |
| CVE-2019-2967 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2019-2966 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2019-2946 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS) Affected: All versions, or not specified |
| CVE-2019-2914 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2019-16168 | 6.5 | Sep 9 | In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe… Affected: All versions, or not specified |
| CVE-2019-2434 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: All versions, or not specified |
| CVE-2019-2455 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: All versions, or not specified |
| CVE-2019-2533 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges) Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)