[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feKG1YDavre_j69wemJPbJ0jzJS--9AF0Zn4Q7sSNVZI":3,"g5a-family:oracle\u002Futilities_framework":190,"g5a-ex:oracle\u002Futilities_framework@*":191},{"success":4,"data":5},true,{"product":6,"versions":73,"topVulnerabilitiesByEpss":97,"kevVulnerabilities":158,"seoMetadata":168,"meta":187},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":72},"oracle","utilities_framework",23,37,2,"2022-03-11",[14,19,22,24,26,29,32,34,37,39,41,43,45,48,51,54,56,59,62,64,66,68,70],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"2.2.0",1,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"2.2.0.0.0",5,{"version":23,"cve_count":17,"kev_count":17,"has_kev":18},"25.10",{"version":25,"cve_count":17,"kev_count":17,"has_kev":18},"25.4",{"version":27,"cve_count":28,"kev_count":11,"has_kev":4},"4.2.0.2.0",27,{"version":30,"cve_count":31,"kev_count":11,"has_kev":4},"4.2.0.3.0",28,{"version":33,"cve_count":17,"kev_count":17,"has_kev":18},"4.3.0.1",{"version":35,"cve_count":36,"kev_count":16,"has_kev":4},"4.3.0.1.0",14,{"version":38,"cve_count":16,"kev_count":17,"has_kev":18},"4.3.0.2.0",{"version":40,"cve_count":16,"kev_count":17,"has_kev":18},"4.3.0.3.0",{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},"4.3.0.4",{"version":44,"cve_count":16,"kev_count":17,"has_kev":18},"4.3.0.4.0",{"version":46,"cve_count":47,"kev_count":17,"has_kev":18},"4.3.0.5.0",4,{"version":49,"cve_count":50,"kev_count":16,"has_kev":4},"4.3.0.6.0",20,{"version":52,"cve_count":53,"kev_count":11,"has_kev":4},"4.4.0.0.0",36,{"version":55,"cve_count":16,"kev_count":17,"has_kev":18},"4.4.0.2",{"version":57,"cve_count":58,"kev_count":11,"has_kev":4},"4.4.0.2.0",33,{"version":60,"cve_count":61,"kev_count":16,"has_kev":4},"4.4.0.3.0",26,{"version":63,"cve_count":16,"kev_count":17,"has_kev":18},"4.4.0.5.0",{"version":65,"cve_count":17,"kev_count":17,"has_kev":18},"4.5.0.0.0",{"version":67,"cve_count":17,"kev_count":17,"has_kev":18},"4.5.0.1.1",{"version":69,"cve_count":17,"kev_count":17,"has_kev":18},"4.5.0.1.3",{"version":71,"cve_count":17,"kev_count":17,"has_kev":18},"4.5.0.2.0","Utilities Framework by Oracle is a technology product with 23 tracked versions and 37 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":17,"kev_count":17,"has_kev":18},{"version":25,"cve_count":17,"kev_count":17,"has_kev":18},{"version":27,"cve_count":28,"kev_count":11,"has_kev":4},{"version":30,"cve_count":31,"kev_count":11,"has_kev":4},{"version":33,"cve_count":17,"kev_count":17,"has_kev":18},{"version":35,"cve_count":36,"kev_count":16,"has_kev":4},{"version":38,"cve_count":16,"kev_count":17,"has_kev":18},{"version":40,"cve_count":16,"kev_count":17,"has_kev":18},{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},{"version":44,"cve_count":16,"kev_count":17,"has_kev":18},{"version":46,"cve_count":47,"kev_count":17,"has_kev":18},{"version":49,"cve_count":50,"kev_count":16,"has_kev":4},{"version":52,"cve_count":53,"kev_count":11,"has_kev":4},{"version":55,"cve_count":16,"kev_count":17,"has_kev":18},{"version":57,"cve_count":58,"kev_count":11,"has_kev":4},{"version":60,"cve_count":61,"kev_count":16,"has_kev":4},{"version":63,"cve_count":16,"kev_count":17,"has_kev":18},{"version":65,"cve_count":17,"kev_count":17,"has_kev":18},{"version":67,"cve_count":17,"kev_count":17,"has_kev":18},{"version":69,"cve_count":17,"kev_count":17,"has_kev":18},{"version":71,"cve_count":17,"kev_count":17,"has_kev":18},[98,106,113,120,125,130,137,143,149,153],{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"cvssVersion":103,"severity":104,"isKev":18,"epssScore":105},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":110,"cvssVersion":103,"severity":111,"isKev":4,"epssScore":112},"CVE-2021-39144","XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.","2021-08-23",8.5,"High",0.98124,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":103,"severity":118,"isKev":4,"epssScore":119},"CVE-2020-2555","Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2020-01-15",9.8,"Critical",0.97116,{"cveId":121,"description":122,"publishedDate":123,"cvssScore":117,"cvssVersion":103,"severity":118,"isKev":18,"epssScore":124},"CVE-2019-10173","It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote attacker to run arbitrary shell commands when unmarshalling XML or any supported format. e.g. JSON. (regression of CVE-2013-7285)","2019-07-23",0.95036,{"cveId":126,"description":127,"publishedDate":128,"cvssScore":117,"cvssVersion":103,"severity":118,"isKev":18,"epssScore":129},"CVE-2020-14756","Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2021-01-20",0.74753,{"cveId":131,"description":132,"publishedDate":133,"cvssScore":134,"cvssVersion":135,"severity":104,"isKev":18,"epssScore":136},"CVE-2015-9251","jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text\u002Fjavascript responses to be executed.","2018-01-18",6.1,"v3.0",0.29726,{"cveId":138,"description":139,"publishedDate":140,"cvssScore":141,"cvssVersion":103,"severity":111,"isKev":18,"epssScore":142},"CVE-2019-10086","In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.","2019-08-20",7.3,0.28384,{"cveId":144,"description":145,"publishedDate":146,"cvssScore":147,"cvssVersion":103,"severity":111,"isKev":18,"epssScore":148},"CVE-2020-25649","A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.","2020-12-03",7.5,0.17714,{"cveId":150,"description":151,"publishedDate":109,"cvssScore":110,"cvssVersion":103,"severity":111,"isKev":18,"epssScore":152},"CVE-2021-39141","XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.",0.16118,{"cveId":154,"description":155,"publishedDate":156,"cvssScore":117,"cvssVersion":103,"severity":118,"isKev":18,"epssScore":157},"CVE-2018-8088","org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.","2018-03-20",0.14703,[159,164],{"cveId":107,"description":108,"publishedDate":109,"cvssScore":110,"severity":111,"isKev":4,"epssScore":112,"cisaVulnName":160,"cisaDateAdded":161,"cisaShortDescription":162,"cisaRequiredAction":163},"XStream Remote Code Execution Vulnerability","2023-03-10","XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation.","Apply updates per vendor instructions.",{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"severity":118,"isKev":4,"epssScore":119,"cisaVulnName":165,"cisaDateAdded":166,"cisaShortDescription":167,"cisaRequiredAction":163},"Oracle Multiple Products Remote Code Execution Vulnerability","2021-11-03","Multiple Oracle products contain a remote code execution vulnerability that allows an unauthenticated attacker with network access via T3 or HTTP to takeover the affected system. Impacted Oracle products: Oracle Coherence in Fusion Middleware, Oracle Utilities Framework, Oracle Retail Assortment Planning, Oracle Commerce, Oracle Communications Diameter Signaling Router (DSR).",{"title":169,"metaDescription":170,"keywords":171,"structuredData":172},"Utilities Framework by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Utilities Framework by Oracle covering 23 versions with 37 tracked vulnerabilities including 1 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Utilities Framework vulnerabilities, Utilities Framework security, Utilities Framework CVE, Oracle Utilities Framework, Utilities Framework threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Utilities Framework KEV, Utilities Framework exploited vulnerabilities",{"@context":173,"@type":174,"name":175,"description":170,"url":176,"manufacturer":177,"applicationCategory":181,"softwareVersion":182,"mainEntity":183},"https:\u002F\u002Fschema.org","SoftwareApplication","Utilities Framework","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Futilities_framework",{"@type":178,"name":179,"url":180},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","23 versions tracked",{"@type":184,"name":185,"description":186,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Utilities Framework Security Vulnerabilities","Security vulnerabilities affecting Utilities Framework by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":188,"apiVersion":189},"2026-10-17T12:49:16.705Z","3.0",[],{"rows":192,"total":11,"capped":18,"failed":17},[193,197],{"cveId":107,"name":160,"severity":111,"cvss":110,"added":161,"epss":112,"published":194,"ranges":195,"checked":4,"hits":196,"covers":18},"2021-08-23T18:15:12.087",[27,30,35,49,52,57,60],[],{"cveId":114,"name":165,"severity":118,"cvss":117,"added":166,"epss":119,"published":198,"ranges":199,"checked":4,"hits":201,"covers":18},"2020-01-15T17:15:17.347",[27,30,200,52,57],"4.3.0.1.0 to 4.3.0.6.0",[]]