What’s Vulnerable › Products

OnCommand Insight vulnerabilities

971 known vulnerabilities, 9 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your OnCommand Insight version is affected

Exploited OnCommand Insight vulnerabilities

• CVE-2020-11023 — JQuery Cross-Site Scripting (XSS) Vulnerability
• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability
• CVE-2023-41993 — Apple Multiple Products WebKit Code Execution Vulnerability
• CVE-2016-8735 — Apache Tomcat Remote Code Execution Vulnerability
• CVE-2016-3427 — Oracle Java SE and JRockit Unspecified Vulnerability
• CVE-2017-12617 — Apache Tomcat Remote Code Execution Vulnerability
• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability
• CVE-2010-1871 — Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
• CVE-2018-11776 — Apache Struts Remote Code Execution Vulnerability

Latest OnCommand Insight vulnerabilities

• CVE-2025-24970 — SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine (CVSS 7.5)
• CVE-2025-21502 — (CVSS 4.8)
• CVE-2025-21492 — (CVSS 4.9)
• CVE-2024-21262 — (CVSS 6.5)
• CVE-2024-38808 — CVE-2024-38808: Spring Expression DoS Vulnerability (CVSS 4.3)
• CVE-2024-21147 — (CVSS 7.4)
• CVE-2024-21145 — (CVSS 4.8)
• CVE-2024-21140 — (CVSS 4.8)
• CVE-2024-21138 — (CVSS 3.7)
• CVE-2024-21131 — (CVSS 3.7)
• CVE-2024-25047 — IBM Cognos Analytics log injection (CVSS 8.6)
• CVE-2024-21102 — (CVSS 4.9)
• CVE-2024-21101 — (CVSS 2.2)
• CVE-2024-21096 — (CVSS 4.9)
• CVE-2024-21094 — (CVSS 3.7)
• CVE-2024-21087 — (CVSS 4.9)
• CVE-2024-21085 — (CVSS 3.7)
• CVE-2024-21069 — (CVSS 4.9)
• CVE-2024-21068 — (CVSS 3.7)
• CVE-2024-21062 — (CVSS 4.9)
• CVE-2024-21061 — (CVSS 4.9)
• CVE-2024-21060 — (CVSS 4.9)
• CVE-2024-21056 — (CVSS 4.9)
• CVE-2024-21055 — (CVSS 4.9)
• CVE-2024-21054 — (CVSS 4.9)