OW
Product
Oncommand Workflow Automation
On CISA KEVExploited in the wild
743
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 32High 79Medium 389Low 0
Watch
Add Oncommand Workflow Automation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21015 | 5.5 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2023-21929 | 5.5 | Apr 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: All versions, or not specified |
| CVE-2023-0482 | 5.5 | Feb 17 | In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that… Affected: All versions, or not specified |
| CVE-2022-21528 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21527 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21509 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-24823 | 5.5 | May 6 | Netty is an open-source, asynchronous event-driven network application framework Affected: All versions, or not specified |
| CVE-2022-21425 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: All versions, or not specified |
| CVE-2021-22570 | 5.5 | Jan 26 | Nullptr dereference when a null char is present in a proto symbol Affected: All versions, or not specified |
| CVE-2022-21378 | 5.5 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21367 | 5.5 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling) Affected: All versions, or not specified |
| CVE-2022-21301 | 5.5 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2021-3522 | 5.5 | Jun 2 | GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags Affected: All versions, or not specified |
| CVE-2021-2304 | 5.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure) Affected: All versions, or not specified |
| CVE-2020-14651 | 5.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles) Affected: All versions, or not specified |
| CVE-2020-14643 | 5.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles) Affected: All versions, or not specified |
| CVE-2020-10727 | 5.5 | Jun 26 | A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file… Affected: All versions, or not specified |
| CVE-2020-2760 | 5.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2019-2991 | 5.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2019-2436 | 5.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: All versions, or not specified |
| CVE-2018-3247 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge) Affected: All versions, or not specified |
| CVE-2018-3195 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: All versions, or not specified |
| CVE-2018-3187 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2018-3185 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified |
| CVE-2018-2812 | 5.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-29489 | 5.4 | May 5 | Highcharts JS is a JavaScript charting library based on SVG Affected: All versions, or not specified |
| CVE-2020-4051 | 5.4 | Jun 15 | In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to… Affected: All versions, or not specified |
| CVE-2024-20994 | 5.3 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema) Affected: All versions, or not specified |
| CVE-2022-21618 | 5.3 | Oct 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS) Affected: All versions, or not specified |
| CVE-2022-21628 | 5.3 | Oct 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server) Affected: All versions, or not specified |
| CVE-2022-21626 | 5.3 | Oct 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: All versions, or not specified |
| CVE-2022-21366 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified |
| CVE-2022-21365 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified |
| CVE-2022-21360 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified |
| CVE-2022-21349 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: All versions, or not specified |
| CVE-2022-21341 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified |
| CVE-2022-21340 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21305 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified |
| CVE-2022-21302 | 5.3 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2022-21299 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
| CVE-2022-21296 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
| CVE-2022-21294 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21293 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21291 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified |
| CVE-2022-21283 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21282 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
| CVE-2022-21277 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified |
| CVE-2022-21271 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21254 | 5.3 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-35586 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)