Oracle Utilities Framework vulnerabilities

• oracle corporation utilities application framework, oracle utilities framework +1 more Vulnerability in the Oracle Utilities Application Framework product of Oracle Utilities... CVE-2026-21924 5.4 MediumJanuary 20, 2026
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +33 more +35 more Deeply nested json in jackson-databind CVE-2020-36518 Public exploitFix available 7.5 HighMarch 11, 2022
• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling CVE-2021-39150 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling CVE-2021-39152 Fix available EPSS 11.4% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream can cause a Denial of Service CVE-2021-39140 Fix available 6.5 MediumAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39149 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39148 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39147 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39146 Fix available EPSS 14.3% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39145 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39141 Public exploitFix available EPSS 16.1% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +10 more +12 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39153 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39151 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39139 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39154 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to a Remote Command Execution attack CVE-2021-39144 In KEVPublic exploitFix available EPSS 98.1% 8.5 HighAugust 23, 2021
• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 more Apache Ant ZIP, and ZIP based, archive denial of service vulerability CVE-2021-36374 Fix available 5.5 MediumJuly 14, 2021
• apache ant, oracle agile product lifecycle management, banking trade finance +29 more +31 more Apache Ant TAR archive denial of service vulnerability CVE-2021-36373 Fix available 5.5 MediumJuly 14, 2021
• json-smart project json-smart-v1, json-smart-v2, oracle utilities framework +2 more Out of bounds read in json-smart CVE-2021-31684 Fix available 7.5 HighJune 1, 2021
• json-smart project json-smart-v1, json-smart-v2, oracle communications cloud native core policy +4 more +6 more Improper Check for Unusual or Exceptional Conditions in json-smart CVE-2021-27568 Public exploitFix available 5.9 MediumFebruary 23, 2021
• oracle coherence, utilities framework +1 more Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core... CVE-2020-14756 Public exploit EPSS 74.9% 9.8 CriticalJanuary 20, 2021
• apache karaf, bouncycastle bc-java, oracle banking corporate lending process management +17 more +19 more Logic error in Legion of the Bouncy Castle BC Java CVE-2020-28052 Public exploitFix available 8.1 HighDecember 18, 2020
• oracle utilities framework Vulnerability in the Oracle Utilities Framework product of Oracle Utilities Applications ... CVE-2020-14895 5.4 MediumOctober 21, 2020
• apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 more XML External Entity (XXE) Injection in Jackson Databind CVE-2020-25649 Fix available EPSS 17.7% 7.5 HighOctober 14, 2020
• apache ant, fedoraproject fedora, gradle +34 more +36 more Code injection in Apache Ant CVE-2020-11979 Fix available 7.5 HighOctober 1, 2020
• apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 more Sensitive Data Exposure in Apache Ant CVE-2020-1945 Fix available 6.3 MediumMay 14, 2020
• dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 more dom4j allows External Entities by default which might enable XXE attacks CVE-2020-10683 Fix available 9.8 CriticalApril 29, 2020
• apache log4j, debian linux, oracle communications application session controller +43 more +45 more Improper validation of certificate with host mismatch in Apache Log4j SMTP appender CVE-2020-9488 Public exploitFix available 3.7 LowApril 27, 2020
• oracle coherence, access manager, commerce platform +7 more +9 more Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching... CVE-2020-2555 In KEVPublic exploit EPSS 97.1% 9.8 CriticalJanuary 15, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• smartbear swagger ui, oracle banking apis, banking digital experience +3 more +5 more Cross-site scripting in Swagger-UI CVE-2019-17495 Public exploitFix available 9.8 CriticalOctober 10, 2019
• apache commons beanutils, nifi, debian linux +57 more +59 more Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019
• x-stream xstream, oracle banking platform, business activity monitoring +7 more +9 more Deserialization of Untrusted Data and Code Injection in xstream CVE-2019-10173 Fix available EPSS 95.0% 7.3 HighJuly 23, 2019
• dom4j project dom4j, debian linux, netapp oncommand workflow automation +11 more +13 more Dom4j contains a XML Injection vulnerability CVE-2018-1000632 Fix available 7.5 HighAugust 20, 2018
• qos slf4j, oracle goldengate application adapters, goldengate stream analytics +10 more +12 more Improper Access Control in SLF4J CVE-2018-8088 Fix available EPSS 14.7% 9.8 CriticalMarch 20, 2018
• jquery, oracle agile product lifecycle management for process, banking platform +44 more +46 more Cross-Site Scripting (XSS) in jquery CVE-2015-9251 Public exploitFix available EPSS 29.7% 6.1 MediumJanuary 18, 2018