Oncommand Workflow Automation (Netapp) - vulnerabilities (CVEs)

744 CVEs, 0 in the last 30 days, 19 known versions, newest CVE from 2025-02-04. Vendor: Netapp.

CVEs of Oncommand Workflow Automation

CVE-2025-0509 - CVSS 7.3 (high), 2025-02-04: A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s…
CVE-2025-21502 - CVSS 4.8 (medium), 2025-01-21: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2025-21492 - CVSS 4.9 (medium), 2025-01-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.4.0.…
CVE-2024-21147 - CVSS 7.4 (high), 2024-07-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-21140 - CVSS 4.8 (medium), 2024-07-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-21145 - CVSS 4.8 (medium), 2024-07-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions…
CVE-2024-21144 - CVSS 3.7 (low), 2024-07-16: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). Supported versions that are…
CVE-2024-21138 - CVSS 3.7 (low), 2024-07-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-21131 - CVSS 3.7 (low), 2024-07-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-30171 - CVSS 5.9 (medium), 2024-05-14: An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of…
CVE-2024-21102 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.36 and prior and…
CVE-2024-21101 - CVSS 2.2 (low), 2024-04-16: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.33 and prior, 7.6.29…
CVE-2024-21096 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0…
CVE-2024-21094 - CVSS 3.7 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-21087 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.36 and…
CVE-2024-21085 - CVSS 3.7 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). Supported versions that are…
CVE-2024-21069 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and…
CVE-2024-21068 - CVSS 3.7 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-21061 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). Supported versions that are affected are 8.0.35 and prior and…
CVE-2024-21062 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0…
CVE-2024-21055 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior. Easily…
CVE-2024-21060 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that are affected are 8.0.36 and prior and…
CVE-2024-21056 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily…
CVE-2024-21051 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily…
CVE-2024-21054 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0…
CVE-2024-21050 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily…
CVE-2024-21053 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily…
CVE-2024-21052 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily…
CVE-2024-21047 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior.…
CVE-2024-21049 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily…
CVE-2024-21015 - CVSS 5.5 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior and 8.3.0 and…
CVE-2024-21012 - CVSS 3.7 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported…
CVE-2024-21011 - CVSS 3.7 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-21009 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0…
CVE-2024-21013 - CVSS 4.4 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0…
CVE-2024-21003 - CVSS 3.1 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are…
CVE-2024-21008 - CVSS 4.4 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0…
CVE-2024-21005 - CVSS 3.1 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are…
CVE-2024-21004 - CVSS 2.5 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are…
CVE-2024-21002 - CVSS 2.5 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are…
CVE-2024-21000 - CVSS 3.8 (low), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.36 and prior…
CVE-2024-20998 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0…
CVE-2024-20994 - CVSS 5.3 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.36 and prior…
CVE-2024-20993 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0…
CVE-2024-28752 - CVSS 9.3 (critical), 2024-03-15: A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on…
CVE-2024-28757 - CVSS 7.5 (high), 2024-03-10: libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
CVE-2024-1635 - CVSS 7.5 (high), 2024-02-19: A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and…
CVE-2023-31102 - CVSS 7.8 (high), 2023-11-03: Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.
CVE-2023-38545 - CVSS 9.8 (critical), 2023-10-18: This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow…
CVE-2023-41993 - CVSS 8.8 (high), 2023-09-21: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is…
CVE-2023-1108 - CVSS 7.5 (high), 2023-09-14: A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the…
CVE-2023-22058 - CVSS 4.4 (medium), 2023-07-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.33 and prior. Difficult to…
CVE-2023-22057 - CVSS 4.9 (medium), 2023-07-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.33 and prior. Easily…
CVE-2023-22056 - CVSS 4.9 (medium), 2023-07-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily…
CVE-2023-22054 - CVSS 4.9 (medium), 2023-07-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily…
CVE-2023-22053 - CVSS 5.9 (medium), 2023-07-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 5.7.42 and prior and 8.0.33…
CVE-2023-22048 - CVSS 3.1 (low), 2023-07-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.33 and prior.…
CVE-2023-22046 - CVSS 4.9 (medium), 2023-07-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily…
CVE-2023-22038 - CVSS 2.7 (low), 2023-07-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.33 and…
CVE-2023-22033 - CVSS 4.4 (medium), 2023-07-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.33 and prior. Difficult to exploit…
CVE-2023-22008 - CVSS 4.9 (medium), 2023-07-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.33 and prior. Easily exploitable…
CVE-2023-22005 - CVSS 4.4 (medium), 2023-07-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.33 and prior.…
CVE-2023-21962 - CVSS 4.9 (medium), 2023-04-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.32 and prior.…
CVE-2023-21945 - CVSS 4.9 (medium), 2023-04-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily…
CVE-2023-21953 - CVSS 4.9 (medium), 2023-04-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported versions that are affected are 8.0.32 and prior. Easily…
CVE-2023-21947 - CVSS 4.4 (medium), 2023-04-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.32 and prior.…
CVE-2023-21946 - CVSS 6.5 (medium), 2023-04-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily…
CVE-2023-21955 - CVSS 4.9 (medium), 2023-04-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported versions that are affected are 8.0.32 and prior. Easily…
CVE-2023-21933 - CVSS 4.9 (medium), 2023-04-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.32 and prior. Easily…
CVE-2023-21940 - CVSS 4.4 (medium), 2023-04-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.32 and prior.…
CVE-2023-21935 - CVSS 4.9 (medium), 2023-04-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily…
CVE-2023-21929 - CVSS 5.5 (medium), 2023-04-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.32 and prior. Easily…
CVE-2023-21920 - CVSS 4.9 (medium), 2023-04-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily…
CVE-2023-21919 - CVSS 4.9 (medium), 2023-04-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.32 and prior. Easily…
CVE-2023-21911 - CVSS 4.9 (medium), 2023-04-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.32 and prior. Easily exploitable…
CVE-2023-0482 - CVSS 5.5 (medium), 2023-02-17: In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with…
CVE-2022-43551 - CVSS 7.5 (high), 2022-12-23: A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use…
CVE-2022-43680 - CVSS 7.5 (high), 2022-10-24: In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory…
CVE-2022-39410 - CVSS 6.5 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily…
CVE-2022-39408 - CVSS 6.5 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily…
CVE-2022-21635 - CVSS 6.5 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Easily exploitable…
CVE-2022-21640 - CVSS 4.9 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily…
CVE-2022-39400 - CVSS 4.9 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily…
CVE-2022-21633 - CVSS 4.9 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.30 and prior. Easily…
CVE-2022-21638 - CVSS 4.9 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily…
CVE-2022-39399 - CVSS 3.7 (low), 2022-10-18: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected…
CVE-2022-21632 - CVSS 4.9 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.30 and…
CVE-2022-21637 - CVSS 4.9 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Easily exploitable…
CVE-2022-21641 - CVSS 4.9 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily…
CVE-2022-21626 - CVSS 5.3 (medium), 2022-10-18: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected…
CVE-2022-21625 - CVSS 4.4 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Difficult…
CVE-2022-21624 - CVSS 3.7 (low), 2022-10-18: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are…
CVE-2022-21628 - CVSS 5.3 (medium), 2022-10-18: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that…
CVE-2022-21605 - CVSS 4.9 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that are affected are 8.0.28 and prior.…
CVE-2022-21611 - CVSS 4.1 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Difficult to exploit…
CVE-2022-21619 - CVSS 3.7 (low), 2022-10-18: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected…
CVE-2022-21608 - CVSS 4.9 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.39 and prior and 8.0.30…
CVE-2022-21618 - CVSS 5.3 (medium), 2022-10-18: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are…
CVE-2022-21607 - CVSS 4.9 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily…
CVE-2022-21617 - CVSS 4.9 (medium), 2022-10-18: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 5.7.39 and prior…