OW
Product
Oncommand Workflow Automation
On CISA KEVExploited in the wild
743
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 32High 79Medium 389Low 0
Watch
Add Oncommand Workflow Automation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-21326 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21322 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21320 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21318 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21316 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21315 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21314 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21310 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21309 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21308 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21307 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21290 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21289 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21288 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21287 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21286 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21285 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21284 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21280 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21279 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2021-35621 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2020-2768 | 6.3 | Apr 15 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2019-2969 | 6.2 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs) Affected: All versions, or not specified |
| CVE-2017-10356 | 6.2 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified |
| CVE-2022-36033 | 6.1 | Aug 29 | jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety Affected: All versions, or not specified |
| CVE-2022-35278 | 6.1 | Aug 23 | In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an… Affected: All versions, or not specified |
| CVE-2022-24891 | 6.1 | Apr 27 | ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library Affected: All versions, or not specified |
| CVE-2021-2307 | 6.1 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging) Affected: All versions, or not specified |
| CVE-2017-10293 | 6.1 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc) Affected: All versions, or not specified |
| CVE-2023-22053 | 5.9 | Jul 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs) Affected: All versions, or not specified |
| CVE-2022-21519 | 5.9 | Jul 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2021-3629 | 5.9 | May 24 | A flaw was found in Undertow Affected: All versions, or not specified |
| CVE-2021-3597 | 5.9 | May 24 | A flaw was found in undertow Affected: All versions, or not specified |
| CVE-2022-21352 | 5.9 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2021-2389 | 5.9 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2021-21409 | 5.9 | Mar 30 | Possible request smuggling in HTTP/2 due missing validation of content-length Affected: All versions, or not specified |
| CVE-2021-3449 | 5.9 | Mar 25 | NULL pointer deref in signature_algorithms processing Affected: All versions, or not specified |
| CVE-2021-21295 | 5.9 | Mar 9 | Possible request smuggling in HTTP/2 due missing validation Affected: All versions, or not specified |
| CVE-2021-23841 | 5.9 | Feb 16 | The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509… Affected: All versions, or not specified |
| CVE-2021-2011 | 5.9 | Jan 20 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: All versions, or not specified |
| CVE-2020-1971 | 5.9 | Dec 8 | The X.509 GeneralName type is a generic type for representing different types of names Affected: All versions, or not specified |
| CVE-2020-2804 | 5.9 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached) Affected: All versions, or not specified |
| CVE-2020-2585 | 5.9 | Jan 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX) Affected: All versions, or not specified |
| CVE-2020-2574 | 5.9 | Jan 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: All versions, or not specified |
| CVE-2020-2573 | 5.9 | Jan 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: All versions, or not specified |
| CVE-2019-2958 | 5.9 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2019-1559 | 5.9 | Feb 27 | 0-byte record padding oracle Affected: All versions, or not specified |
| CVE-2018-3144 | 5.9 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit) Affected: All versions, or not specified |
| CVE-2018-2973 | 5.9 | Jul 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE) Affected: All versions, or not specified |
| CVE-2018-2761 | 5.9 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)