Approved changes feed: RSS · Atom

cpe:2.3:a:netapp:oncommand_workflow_automation:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetapp (f19678f6-cb27-5a55-8852-34b249f80ef9)
ProductOncommand Workflow Automation (3dfa0a19-b9f5-5a98-a83f-568c231e8493)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-30171 vulnerable 2026-06-08 06:35:29.133058 Details available
An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.
Published: 2024-05-09T00:00:00.000Z
Updated: 2024-08-19T17:18:20.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21637 vulnerable 2026-06-08 05:40:01.893607 Details available
MEDIUM (4.9)
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Published: 2022-10-18T00:00:00.000Z
Updated: 2024-09-24T15:01:18.291Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21589 vulnerable 2026-06-08 05:40:01.812337 Details available
MEDIUM (4.3)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.39 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Published: 2022-10-18T00:00:00.000Z
Updated: 2024-09-24T19:45:51.613Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7317 vulnerable 2026-06-08 05:14:14.276382 Details available
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
Published: 2019-02-04T07:00:00.000Z
Updated: 2026-05-28T18:24:45.126Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5503 vulnerable 2026-06-08 05:13:59.412382 Details available
OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.
Published: 2019-09-10T15:50:41.000Z
Updated: 2024-08-04T20:01:51.557Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-2426 vulnerable 2026-06-08 05:13:44.629486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-2422 vulnerable 2026-06-08 05:13:44.607820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11212 vulnerable 2026-06-08 05:10:37.971475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3292 vulnerable 2026-06-08 05:06:37.913387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.