First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2016-1894

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

NetApp OnCommand Workflow Automation before 3.1P2 allows remote attackers to bypass authentication via unspecified vectors.

Metrics

CVSS 3.0 8.1/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Feb 7, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-18956.5NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related t CVE-2016-18969.8Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.0 CVE-2016-18975.5FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Str CVE-2016-18985.5FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live St CVE-2016-18993.7CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct CVE-2016-19003.7CRLF injection vulnerability in the cgit_print_http_headers function in ui-shared.c in CGit before 0.12 allows remote attackers with permiss CVE-2016-19019.8Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impact via a large value CVE-2016-19027.5The nextBytes function in the SecureRandom class in Symfony before 2.3.37, 2.6.x before 2.6.13, and 2.7.x before 2.7.9 does not properly gen CVE-2016-19039.1The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 al CVE-2016-19047.3Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly ha CVE-2016-19057.7The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resourc CVE-2016-19069.8Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that

CVE-2016-1894: High severity, CVSS 8.1 | Vulnix