oncommand workflow automation vulnerabilities and fixes

Recent CVEs affecting oncommand workflow automation, with upgrade or downgrade steps. 34 tracked.

Also searched as: oncommandworkflowautomation.

oncommand workflow automation has 34 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 28. Most recent: 2025-01-21. Highest priority: CVE-2024-1635 (score 59/100).

• CVE-2024-28757 HIGH 7.5 UPGRADE MITIGATE libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (c
• CVE-2024-1635 HIGH 7.5 MITIGATE MITIGATE A vulnerability was found in Undertow
• CVE-2025-21492 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
• CVE-2024-28752 CRITICAL 9.3 UPGRADE MITIGATE A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allow
• CVE-2024-21147 HIGH 7.4 MITIGATE MITIGATE Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac
• CVE-2024-21144 LOW 3.7 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: C
• CVE-2024-21140 MEDIUM 4.8 MITIGATE MITIGATE Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac
• CVE-2024-21138 LOW 3.7 MITIGATE MITIGATE Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac
• CVE-2024-21102 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling)
• CVE-2024-21101 LOW 2.2 UPGRADE MITIGATE Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
• CVE-2024-21096 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump)
• CVE-2024-21087 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin)
• CVE-2024-21085 LOW 3.7 MITIGATE MITIGATE Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: C
• CVE-2024-21069 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL)
• CVE-2024-21062 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
• CVE-2024-21061 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in)
• CVE-2024-21060 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary)
• CVE-2024-21056 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)
• CVE-2024-21055 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
• CVE-2024-21054 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
• CVE-2024-21053 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)
• CVE-2024-21052 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)
• CVE-2024-21051 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)
• CVE-2024-21050 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)
• CVE-2024-21049 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)
• CVE-2024-21047 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
• CVE-2024-21015 MEDIUM 5.5 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)
• CVE-2024-21013 MEDIUM 4.4 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
• CVE-2024-21009 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
• CVE-2024-21008 MEDIUM 4.4 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
• CVE-2024-21000 LOW 3.8 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges)
• CVE-2024-20998 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
• CVE-2024-20994 MEDIUM 5.3 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)
• CVE-2024-20993 MEDIUM 4.9 UPGRADE MITIGATE Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)

FAQ

How do I fix oncommand workflow automation vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is oncommand workflow automation being exploited right now?

None of the tracked oncommand workflow automation CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which oncommand workflow automation CVE should I patch first?

CVE-2024-1635 currently ranks highest (59/100): A vulnerability was found in Undertow.

RSS feed for oncommand workflow automation · ← Back to latest CVEs