Oncommand Insight

CVEs (971)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-14782	McAfee Epolicy Orchestrator	Low	0.24	3.7	0.02	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2020-14781	NetApp Hci Management Node	Low	0.24	3.7	0.02	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2020-14779	Fedoraproject Fedora	Low	0.24	3.7	0.04	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2020-14581	McAfee Epolicy Orchestrator	Low	0.24	3.7	0.03	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access…
CVE-2020-14579	McAfee Epolicy Orchestrator	Low	0.24	3.7	0.04	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2020-14578	McAfee Epolicy Orchestrator	Low	0.24	3.7	0.04	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2020-14577	Fedoraproject Fedora	Low	0.24	3.7	0.03	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2020-2922	MariaDB MariaDB	Low	0.24	3.7	0.02	Apr 15, 2020	Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple…
CVE-2020-2778	NetApp Steelstore Cloud Integrated Storage	Low	0.24	3.7	0.02	Apr 15, 2020	Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks…
CVE-2020-2773	McAfee Epolicy Orchestrator	Low	0.24	3.7	0.04	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2020-2757	McAfee Epolicy Orchestrator	Low	0.24	3.7	0.04	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2020-2756	McAfee Epolicy Orchestrator	Low	0.24	3.7	0.04	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2020-2755	McAfee Epolicy Orchestrator	Low	0.24	3.7	0.04	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2020-2659	NetApp Steelstore Cloud Integrated Storage	Low	0.24	3.7	0.04	Jan 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access…
CVE-2020-2654	McAfee Epolicy Orchestrator	Low	0.24	3.7	0.04	Jan 15, 2020	Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…
CVE-2020-2590	McAfee Epolicy Orchestrator	Low	0.24	3.7	0.03	Jan 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2020-2583	McAfee Epolicy Orchestrator	Low	0.24	3.7	0.04	Jan 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker…
CVE-2019-2910	NetApp Snapcenter	Low	0.24	3.7	0.02	Oct 16, 2019	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 5.6.45 and prior and 5.7.27 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2952	Sun Corporation Java SE	Low	0.24	3.7	0.04	Jul 18, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability…
CVE-2018-1842	IBM Cognos Analytics	Low	0.23	3.6	0.00	Nov 9, 2018	IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verification on its id_token. IBM X-Force ID: 150902.

CVE-2020-14782LowOct 21, 2020
McAfee
Epolicy Orchestrator
risk 0.24cvss 3.7epss 0.02
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2020-14781LowOct 21, 2020
NetApp
Hci Management Node
risk 0.24cvss 3.7epss 0.02
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2020-14779LowOct 21, 2020
Fedoraproject
Fedora
risk 0.24cvss 3.7epss 0.04
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2020-14581LowJul 15, 2020
McAfee
Epolicy Orchestrator
risk 0.24cvss 3.7epss 0.03
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access…
CVE-2020-14579LowJul 15, 2020
McAfee
Epolicy Orchestrator
risk 0.24cvss 3.7epss 0.04
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2020-14578LowJul 15, 2020
McAfee
Epolicy Orchestrator
risk 0.24cvss 3.7epss 0.04
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2020-14577LowJul 15, 2020
Fedoraproject
Fedora
risk 0.24cvss 3.7epss 0.03
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2020-2922LowApr 15, 2020
MariaDB
MariaDB
risk 0.24cvss 3.7epss 0.02
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple…
CVE-2020-2778LowApr 15, 2020
NetApp
Steelstore Cloud Integrated Storage
risk 0.24cvss 3.7epss 0.02
Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks…
CVE-2020-2773LowApr 15, 2020
McAfee
Epolicy Orchestrator
risk 0.24cvss 3.7epss 0.04
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2020-2757LowApr 15, 2020
McAfee
Epolicy Orchestrator
risk 0.24cvss 3.7epss 0.04
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2020-2756LowApr 15, 2020
McAfee
Epolicy Orchestrator
risk 0.24cvss 3.7epss 0.04
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2020-2755LowApr 15, 2020
McAfee
Epolicy Orchestrator
risk 0.24cvss 3.7epss 0.04
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2020-2659LowJan 15, 2020
NetApp
Steelstore Cloud Integrated Storage
risk 0.24cvss 3.7epss 0.04
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access…
CVE-2020-2654LowJan 15, 2020
McAfee
Epolicy Orchestrator
risk 0.24cvss 3.7epss 0.04
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…
CVE-2020-2590LowJan 15, 2020
McAfee
Epolicy Orchestrator
risk 0.24cvss 3.7epss 0.03
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2020-2583LowJan 15, 2020
McAfee
Epolicy Orchestrator
risk 0.24cvss 3.7epss 0.04
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker…
CVE-2019-2910LowOct 16, 2019
NetApp
Snapcenter
risk 0.24cvss 3.7epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 5.6.45 and prior and 5.7.27 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2952LowJul 18, 2018
Sun Corporation
Java SE
risk 0.24cvss 3.7epss 0.04
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability…
CVE-2018-1842LowNov 9, 2018
IBM
Cognos Analytics
risk 0.23cvss 3.6epss 0.00
IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verification on its id_token. IBM X-Force ID: 150902.

Page 45 of 49