Product by Oracle
Utilities Testing Accelerator
27 known vulnerabilities in Utilities Testing Accelerator (Oracle), 1 of them actively exploited (CISA KEV).
Key figures
27
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-39144 | XStream is vulnerable to a Remote Command Execution attack In CISA KEValso in 16 other products | 8.5 | |
| High | CVE-2020-13936 | Velocity Sandbox Bypass | 8.8 | |
| High | CVE-2021-39141 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39146 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-4104 | Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 | 7.5 | |
| High | CVE-2021-39152 | A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling | 8.5 | |
| High | CVE-2021-36090 | Apache Commons Compress 1.0 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35516 | Apache Commons Compress 1.6 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35515 | Apache Commons Compress 1.6 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35517 | Apache Commons Compress 1.1 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-39149 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39148 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39147 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39151 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39154 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39139 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39153 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39145 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39150 | A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling | 8.5 | |
| Medium | CVE-2021-33037 | Incorrect Transfer-Encoding handling with HTTP/1.0 | 5.3 | |
| Medium | CVE-2021-39140 | XStream can cause a Denial of Service | 6.5 | |
| High | CVE-2021-2351 | Oracle WebLogic Server: security vulnerability | 8.3 | |
| Medium | CVE-2021-29425 | Possible limited path traversal vulnerabily in Apache Commons IO | 4.8 | |
| Medium | CVE-2019-10219 | Hibernate Hibernate-validator: Cross-site Scripting | 6.5 | |
| Medium | CVE-2021-36374 | Apache Ant ZIP, and ZIP based, archive denial of service vulerability | 5.5 |