OW
Product
Oncommand Workflow Automation
On CISA KEVExploited in the wild
743
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 32High 79Medium 389Low 0
Watch
Add Oncommand Workflow Automation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-2144 | 7.2 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: All versions, or not specified |
| CVE-2020-14828 | 7.2 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2020-14697 | 7.2 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: All versions, or not specified |
| CVE-2020-14678 | 7.2 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: All versions, or not specified |
| CVE-2020-14663 | 7.2 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: All versions, or not specified |
| CVE-2022-21351 | 7.1 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21278 | 7.1 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2019-2534 | 7.1 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: All versions, or not specified |
| CVE-2018-3064 | 7.1 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified |
| CVE-2018-2562 | 7.1 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition) Affected: All versions, or not specified |
| CVE-2017-10309 | 7.1 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified |
| CVE-2025-0509 | 6.8 | Feb 4 | A security issue was found in Sparkle before version 2.6.4 Affected: All versions, or not specified |
| CVE-2021-35567 | 6.8 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2021-2046 | 6.8 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure) Affected: All versions, or not specified |
| CVE-2020-2601 | 6.8 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: All versions, or not specified |
| CVE-2019-2989 | 6.8 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: All versions, or not specified |
| CVE-2019-2949 | 6.8 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos) Affected: All versions, or not specified |
| CVE-2017-10274 | 6.8 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: All versions, or not specified |
| CVE-2023-21946 | 6.5 | Apr 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-39408 | 6.5 | Oct 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21635 | 6.5 | Oct 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2022-39410 | 6.5 | Oct 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21569 | 6.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21556 | 6.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21358 | 6.5 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2021-43797 | 6.5 | Dec 9 | HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling Affected: All versions, or not specified |
| CVE-2021-2298 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-2202 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: All versions, or not specified |
| CVE-2021-2178 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: All versions, or not specified |
| CVE-2021-2172 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2021-2024 | 6.5 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-2020 | 6.5 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14846 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14836 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14830 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14827 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth) Affected: All versions, or not specified |
| CVE-2020-14800 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2020-14775 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2020-14769 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14765 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS) Affected: All versions, or not specified |
| CVE-2020-14680 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14619 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: All versions, or not specified |
| CVE-2020-14591 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in) Affected: All versions, or not specified |
| CVE-2020-14576 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF) Affected: All versions, or not specified |
| CVE-2020-14539 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-10719 | 6.5 | May 26 | A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes Affected: All versions, or not specified |
| CVE-2020-2790 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth) Affected: All versions, or not specified |
| CVE-2020-2780 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2020-2686 | 6.5 | Jan 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-2627 | 6.5 | Jan 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)