oracle utilities framework

Name: oracle utilities framework
Brand: oracle

productUS

cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

6critical20high10medium1low

updated 2026-10-27

vulnerabilities (38)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-39144US	high8.5OT critical	98.1% (100th)	KEV	no fix	2021-08-23	7 versions
CVE-2020-2555US	critical9.8OT critical	97.1% (100th)	KEV	no fix	2020-01-15	5 versions
CVE-2021-45105US	medium5.9	100.0% (100th)	Exploit	no fix	2021-12-18	4 versions
CVE-2020-14756US	critical9.8	74.8% (100th)	Exploit	no fix	2021-01-20	6 versions
CVE-2015-9251US	medium6.1	29.7% (98th)	Exploit	no fix	2018-01-18	4.3.0.1 → 4.3.0.4
CVE-2021-39141US	high8.5	16.1% (97th)	Exploit	no fix	2021-08-23	7 versions
CVE-2020-9488US	low3.7	8.22% (95th)	Exploit	no fix	2020-04-27	6 versions
CVE-2020-28052US	high8.1	7.22% (94th)	Exploit	no fix	2020-12-18	4 versions
CVE-2019-17495US	critical9.8	5.73% (93rd)	Exploit	no fix	2019-10-10	3 versions
CVE-2020-36518US	high7.5	4.86% (92nd)	Exploit	no fix	2022-03-11	6 versions
CVE-2021-27568US	medium5.9	2.90% (87th)	Exploit	no fix	2021-02-23	3 versions
CVE-2019-10219US	medium6.1	2.16% (82nd)	Exploit	no fix	2019-11-08	6 versions
CVE-2019-10173US	critical9.8	95.0% (100th)	—	no fix	2019-07-23	5 versions
CVE-2019-10086US	high7.3	29.1% (98th)	—	no fix	2019-08-20	6 versions
CVE-2020-25649US	high7.5	17.7% (97th)	—	no fix	2020-12-03	5 versions
CVE-2018-8088US	critical9.8	14.7% (97th)	—	no fix	2018-03-20	8 versions
CVE-2021-39146US	high8.5	14.3% (97th)	—	no fix	2021-08-23	7 versions
CVE-2021-39152US	high8.5	11.4% (96th)	—	no fix	2021-08-23	7 versions
CVE-2020-11979US	high7.5	7.76% (95th)	—	no fix	2020-10-01	4 versions
CVE-2020-10683US	critical9.8	7.27% (94th)	—	no fix	2020-05-01	6 versions
CVE-2018-1000632US	high7.5	6.57% (94th)	—	no fix	2018-08-20	6 versions
CVE-2021-39140US	medium6.3	5.92% (93rd)	—	no fix	2021-08-23	7 versions
CVE-2021-39154US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	7 versions
CVE-2021-39151US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	7 versions
CVE-2021-39149US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	7 versions
CVE-2021-39148US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	7 versions
CVE-2021-39147US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	7 versions
CVE-2021-39139US	high8.8	4.54% (92nd)	—	no fix	2021-08-23	7 versions
CVE-2021-39153US	high8.5	4.46% (91st)	—	no fix	2021-08-23	7 versions
CVE-2021-39145US	high8.5	4.06% (91st)	—	no fix	2021-08-23	7 versions
CVE-2021-39150US	high8.5	3.44% (89th)	—	no fix	2021-08-23	7 versions
CVE-2021-36374US	medium5.5	2.63% (85th)	—	no fix	2021-07-14	6 versions
CVE-2021-36373US	medium5.5	2.52% (85th)	—	no fix	2021-07-14	6 versions
CVE-2021-2351US	medium5.1OT elevated	2.43% (84th)	—	no fix	2021-07-21	5 versions
CVE-2021-31684US	high7.5	2.28% (83rd)	—	no fix	2021-06-01	3 versions
CVE-2020-1945US	medium6.3	1.77% (78th)	—	no fix	2020-05-14	6 versions
CVE-2020-14895US	medium5.5	0.77% (55th)	—	no fix	2020-10-21	6 versions
CVE-2026-21924US	—	0.22% (12th)	—	no fix	2026-01-20	7 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data18 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type10 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-611Improper Restriction of XML External Entity Reference3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency2 CVEs
CWE-264CWE-2642 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE38 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan