Product by Oracle

    Oracle Utilities Application Framework

    38 known vulnerabilities in Oracle Utilities Application Framework (Oracle), 2 of them actively exploited (CISA KEV).

    Key figures

    38

    Vulnerabilities

    2

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Utilities Application Framework (Oracle)
    CriticalCVE-2020-2555

    Oracle Multiple Products Remote Code Execution Vulnerability

    In CISA KEValso in 10 other products

    		9.8
    CriticalCVE-2021-39144

    XStream is vulnerable to a Remote Command Execution attack

    In CISA KEValso in 16 other products

    		8.5
    CriticalCVE-2020-14756

    Oracle Utilities Framework: security vulnerability

    also in 2 other products

    		9.8
    CriticalCVE-2018-8088

    Qos Slf4j: security vulnerability

    also in 12 other products

    		9.8
    CriticalCVE-2020-10683

    Dom4j Project Dom4j: XML External Entity (XXE)

    also in 36 other products

    		9.8
    CriticalCVE-2019-17495

    SmartBear Swagger UI: Cross-Site Request Forgery (CSRF)

    also in 5 other products

    		9.8
    HighCVE-2021-39141

    XStream is vulnerable to an Arbitrary Code Execution attack

    also in 16 other products

    		8.5
    HighCVE-2021-39146

    XStream is vulnerable to an Arbitrary Code Execution attack

    also in 16 other products

    		8.5
    CriticalCVE-2019-10173

    Xstream: Code Injection

    also in 9 other products

    		7.3
    HighCVE-2021-39152

    A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling

    also in 16 other products

    		8.5
    HighCVE-2019-10086

    Apache Commons Beanutils: security vulnerability

    also in 58 other products

    		7.3
    HighCVE-2020-25649

    Jackson-databind: Improper Restriction of XML External Entity Reference

    also in 39 other products

    		7.5
    HighCVE-2020-28052

    Oracle Utilities Framework: security vulnerability

    also in 19 other products

    		8.1
    HighCVE-2021-39149

    XStream is vulnerable to an Arbitrary Code Execution attack

    also in 16 other products

    		8.5
    HighCVE-2021-39148

    XStream is vulnerable to an Arbitrary Code Execution attack

    also in 16 other products

    		8.5
    HighCVE-2021-39147

    XStream is vulnerable to an Arbitrary Code Execution attack

    also in 16 other products

    		8.5
    HighCVE-2021-39151

    XStream is vulnerable to an Arbitrary Code Execution attack

    also in 16 other products

    		8.5
    HighCVE-2021-39154

    XStream is vulnerable to an Arbitrary Code Execution attack

    also in 16 other products

    		8.5
    MediumCVE-2021-45105

    Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

    also in 107 other products

    		5.9
    HighCVE-2021-39139

    XStream is vulnerable to an Arbitrary Code Execution attack

    also in 16 other products

    		8.5
    HighCVE-2021-39153

    XStream is vulnerable to an Arbitrary Code Execution attack

    also in 14 other products

    		8.5
    HighCVE-2020-11979

    Apache Ant: Creation of Temporary File in Directory with Insecure Permissions

    also in 30 other products

    		7.5
    HighCVE-2021-39145

    XStream is vulnerable to an Arbitrary Code Execution attack

    also in 16 other products

    		8.5
    HighCVE-2018-1000632

    Dom4j Project Dom4j: security vulnerability

    also in 12 other products

    		7.5
    MediumCVE-2015-9251

    jQuery: Cross-Site Scripting (XSS)

    also in 45 other products

    		6.1

    All vulnerabilities in search

    News

    All products by Oracle