netapp oncommand_workflow_automation vulnerabilities (CVE)

CVE records published for netapp oncommand_workflow_automation, newest first. Follow to get an email when a new one appears.

7 results

7.3High

CVE-2025-0509 1 year ago

Signing Checks Bypass

sparkle-project Sparkle

A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s (Ed)DSA signing checks.

4.8Medium

CVE-2025-21502 1 year ago

Oracle Corporation Oracle Java SE

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle Graal…

4.9Medium

CVE-2025-21492 1 year ago

Oracle Corporation MySQL Server

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple …

8.8High

CVE-2023-41993 KEV 3 years ago

Apple Multiple Products WebKit Code Execution Vulnerability

Apple macOS; apple iphone_os; apple ipad_os; apple macos

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

24%EPSS

8.1High

CVE-2018-11776 KEV 8 years ago

Apache Struts Remote Code Execution Vulnerability

Apache Software Foundation Apache Struts

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upp…

100%EPSS

8.1High

CVE-2017-12617 KEV 9 years ago

Apache Tomcat Remote Code Execution Vulnerability

Apache Software Foundation Apache Tomcat

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP fil…

100%EPSS

9.8Critical

CVE-2016-3427 KEV 10 years ago

Oracle Java SE and JRockit Unspecified Vulnerability

oracle jdk; oracle jre; oracle jrockit; oracle linux

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

92%EPSS