Oracle Corp. Oracle Utilities Framework

Name: Oracle Corp. Oracle Utilities Framework
Brand: Oracle Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical3high1medium0low

updated 2026-10-28

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-14756US	critical9.8	74.8% (100th)	Exploit	no fix	2021-01-20	6 versions
CVE-2015-9251US	medium6.1	29.7% (98th)	Exploit	no fix	2018-01-18	4.3.0.1 → 4.3.0.4
CVE-2020-36518US	high7.5	4.86% (92nd)	Exploit	no fix	2022-03-11	6 versions
CVE-2020-25649US	high7.5	17.7% (97th)	—	no fix	2020-12-03	5 versions
CVE-2021-31684US	high7.5	2.28% (83rd)	—	no fix	2021-06-01	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write2 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-264CWE-2641 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVEs
CWE-707Improper Neutralization1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.