CVE-2015-3292: Netapp Oncommand Workflow Automation

High severity, CVSS 10.0. EPSS: 12.4% chance of exploitation in the next 30 days.

The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

• Netapp Oncommand Workflow Automation: up to and including 2.2.1; version 3.0 only

Published 2015-05-31. Last modified 2026-06-17.