What’s Vulnerable › Products

Oracle Utilities Testing Accelerator vulnerabilities

27 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Oracle Utilities Testing Accelerator version is affected

Exploited Oracle Utilities Testing Accelerator vulnerabilities

• CVE-2021-39144 — XStream Remote Code Execution Vulnerability

Latest Oracle Utilities Testing Accelerator vulnerabilities

• CVE-2021-4104 — Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 (CVSS 7.5)
• CVE-2021-39152 — A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling (CVSS 8.5)
• CVE-2021-39150 — A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling (CVSS 8.5)
• CVE-2021-39140 — XStream can cause a Denial of Service (CVSS 6.3)
• CVE-2021-39154 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39153 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39151 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39149 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39148 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39147 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39146 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39145 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39144 — XStream Remote Code Execution Vulnerability (CVSS 8.5) — exploited
• CVE-2021-39141 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39139 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.8)
• CVE-2021-2351 — (CVSS 5.1)
• CVE-2021-36374 — Apache Ant ZIP, and ZIP based, archive denial of service vulerability (CVSS 5.5)
• CVE-2021-36373 — Apache Ant TAR archive denial of service vulnerability (CVSS 5.5)
• CVE-2021-36090 — Apache Commons Compress 1.0 to 1.20 denial of service vulnerability (CVSS 7.5)
• CVE-2021-35517 — Apache Commons Compress 1.1 to 1.20 denial of service vulnerability (CVSS 7.5)
• CVE-2021-35516 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
• CVE-2021-35515 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
• CVE-2021-33037 — Incorrect Transfer-Encoding handling with HTTP/1.0 (CVSS 5.3)
• CVE-2021-22118 — (CVSS 7.8)
• CVE-2021-29425 — Possible limited path traversal vulnerabily in Apache Commons IO (CVSS 4.8)