Product by Oracle
Utilities Applications
23 known vulnerabilities in Utilities Applications (Oracle), 0 of them actively exploited (CISA KEV).
Key figures
23
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-21441 | Urllib3: Improper Handling of Highly Compressed Data (Data Amplification) | 7.5 | |
| Critical | CVE-2026-4800 | lodash vulnerable to Code Injection via `_.template` imports key names | 8.1 | |
| High | CVE-2026-42587 | Netty: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-24308 | Apache ZooKeeper: Sensitive information disclosure in client configuration handling | 7.5 | |
| High | CVE-2026-3505 | Legion of the Bouncy Castle BC-JAVA: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-68497 | jackson-databind: Duration XMLGregorianCalendar Unbounded Number Parse DoS | 7.5 | |
| Critical | CVE-2025-58050 | PCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS | 9.1 | |
| High | CVE-2026-34481 | Apache Log4j JSON Template Layout: Improper Encoding or Escaping of Output | 7.5 | |
| High | CVE-2026-29062 | FasterXML Jackson-core: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-83343 | Oracle Utilities Network Management System: security vulnerability | 8.2 | |
| Medium | CVE-2026-49844 | Apache Log4j API: Improper serialization of non-finite floating-point values in MapMessage.asJson() | 5.9 | |
| Medium | CVE-2026-64607 | Apache HttpComponents Client: Missing Release of Resource after Effective Lifetime | 5.3 | |
| High | CVE-2026-83342 | Oracle Utilities Network Management System: security vulnerability | 7.8 | |
| Critical | CVE-2026-41855 | Spring Framework Unsafe Deserialization via Jackson JMS Converters | 8.1 | |
| Medium | CVE-2026-101605 | Oracle Utilities Network Management System: security vulnerability | 5.3 | |
| Medium | CVE-2026-101589 | Oracle Utilities Network Management System: security vulnerability | 5.3 | |
| High | CVE-2026-46981 | Oracle Utilities Network Management System: Improper Access Control | 7.2 | |
| High | CVE-2026-22747 | Unauthorized User Impersonation when Using X.509 Client Certificates | 8.1 | |
| Medium | CVE-2026-101517 | Oracle Utilities Network Management System: security vulnerability | 5.5 | |
| Medium | CVE-2026-0540 | DOMPurify XSS via Missing Rawtext Elements in SAFE_FOR_XML | 6.1 | |
| Medium | CVE-2026-41239 | DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode | 6.8 | |
| Medium | CVE-2026-46980 | Oracle Utilities Network Management System: Improper Access Control | 4.3 | |
| Medium | CVE-2026-46948 | Oracle Utilities Network Management System: Improper Access Control | 4.6 |