OW
Product
Oncommand Workflow Automation
On CISA KEVExploited in the wild
744
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 32High 79Medium 389Low 0
Watch
Add Oncommand Workflow Automation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-2806 | 5.3 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling) Affected: All versions, or not specified |
| CVE-2020-2781 | 5.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified |
| CVE-2020-2752 | 5.3 | Apr 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: All versions, or not specified |
| CVE-2020-1954 | 5.3 | Apr 1 | Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus Affected: All versions, or not specified |
| CVE-2019-2993 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API) Affected: All versions, or not specified |
| CVE-2019-2924 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2019-2923 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2019-2922 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2019-5503 | 5.3 | Sep 10 | OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via… Affected: 5.0 |
| CVE-2019-13118 | 5.3 | Jul 1 | In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to… Affected: All versions, or not specified |
| CVE-2019-7317 | 5.3 | Feb 4 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute Affected: before 5.1 |
| CVE-2018-3174 | 5.3 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: All versions, or not specified |
| CVE-2018-3074 | 5.3 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles) Affected: All versions, or not specified |
| CVE-2018-3062 | 5.3 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached) Affected: All versions, or not specified |
| CVE-2017-10357 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified |
| CVE-2017-10355 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: All versions, or not specified |
| CVE-2017-10350 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS) Affected: All versions, or not specified |
| CVE-2017-10349 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: All versions, or not specified |
| CVE-2017-10348 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified |
| CVE-2017-10347 | 5.3 | Oct 19 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified |
| CVE-2017-10281 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: All versions, or not specified |
| CVE-2022-21539 | 5.0 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2022-21418 | 5.0 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2021-2385 | 5.0 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: All versions, or not specified |
| CVE-2021-2048 | 5.0 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2019-2536 | 5.0 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: All versions, or not specified |
| CVE-2018-3081 | 5.0 | Jul 18 | Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs) Affected: All versions, or not specified |
| CVE-2025-21492 | 4.9 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-21102 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling) Affected: All versions, or not specified |
| CVE-2024-21096 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump) Affected: All versions, or not specified |
| CVE-2024-21087 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin) Affected: All versions, or not specified |
| CVE-2024-21069 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: All versions, or not specified |
| CVE-2024-21062 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-21061 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in) Affected: All versions, or not specified |
| CVE-2024-21060 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary) Affected: All versions, or not specified |
| CVE-2024-21056 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2024-21055 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-21054 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-21053 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2024-21052 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2024-21051 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2024-21050 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2024-21049 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2024-21047 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2024-21009 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-20998 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-20993 | 4.9 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2023-22057 | 4.9 | Jul 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: All versions, or not specified |
| CVE-2023-22056 | 4.9 | Jul 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2023-22054 | 4.9 | Jul 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)