Oracle Utilities Testing Accelerator vulnerabilities

• apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 more Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling CVE-2021-39150 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling CVE-2021-39152 Fix available EPSS 11.4% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream can cause a Denial of Service CVE-2021-39140 Fix available 6.5 MediumAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39149 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39148 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39147 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39146 Fix available EPSS 14.3% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39145 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39141 Public exploitFix available EPSS 16.1% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +10 more +12 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39153 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39151 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39139 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39154 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to a Remote Command Execution attack CVE-2021-39144 In KEVPublic exploitFix available EPSS 98.1% 8.5 HighAugust 23, 2021
• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 more Apache Ant ZIP, and ZIP based, archive denial of service vulerability CVE-2021-36374 Fix available 5.5 MediumJuly 14, 2021
• apache ant, oracle agile product lifecycle management, banking trade finance +29 more +31 more Apache Ant TAR archive denial of service vulnerability CVE-2021-36373 Fix available 5.5 MediumJuly 14, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 more Apache Commons Compress 1.0 to 1.20 denial of service vulnerability CVE-2021-36090 Fix available EPSS 12.9% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 more Apache Commons Compress 1.1 to 1.20 denial of service vulnerability CVE-2021-35517 Fix available EPSS 10.6% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 more Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35516 Fix available EPSS 12.4% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +23 more +25 more Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35515 Fix available EPSS 11.6% 7.5 HighJuly 13, 2021
• apache tomcat, tomee, debian linux +19 more +21 more Incorrect Transfer-Encoding handling with HTTP/1.0 CVE-2021-33037 Fix available EPSS 74.7% 5.3 MediumJuly 12, 2021
• vmware spring framework, netapp hci, management services for element software +29 more +31 more Improper Privilege Management in Spring Framework CVE-2021-22118 Fix available 7.8 HighMay 27, 2021
• apache commons io, debian linux, netapp active iq unified manager +57 more +59 more Possible limited path traversal vulnerabily in Apache Commons IO CVE-2021-29425 Public exploitFix available EPSS 10.5% 4.8 MediumApril 13, 2021
• apache velocity engine, wss4j, debian linux +13 more +15 more Velocity Sandbox Bypass CVE-2020-13936 Fix available EPSS 22.7% 8.8 HighMarch 10, 2021
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019