Login Request a demo
UF
Product
Utilities Framework
by Oracle · last CVE Jan 20, 2026
On CISA KEVExploited in the wild
35
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities35In the news0Timeline
Severity mix
Critical 6High 20Medium 8Low 1
Severity
All severities35Critical6High20Medium8Low1
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Utilities Framework to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-39140
6.3
6%
Aug 23
XStream can cause a Denial of Service
Affected: 4.2.0.2.0; 4.2.0.3.0; 4.3.0.1.0; 4.3.0.6.0; 4.4.0.0.0; 4.4.0.2.0; +1 more
CVE-2020-1945
6.3
2%
May 14
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak…
Affected: 4.3.0.1.0 through 4.3.0.6.0; 2.2.0.0.0; 4.2.0.2.0; 4.2.0.3.0; 4.4.0.0.0; 4.4.0.2.0
CVE-2015-9251
6.1
30%
Jan 18
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript…
Affected: 4.3.0.1 through 4.3.0.4
CVE-2021-27568
5.9
3%
Feb 23
An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4
Affected: 4.4.0.0.0; 4.4.0.2.0; 4.4.0.3.0
CVE-2021-36374
5.5
3%
Jul 14
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even…
Affected: 4.3.0.1.0 through 4.3.0.6.0; 4.2.0.2.0; 4.2.0.3.0; 4.4.0.0.0; 4.4.0.2.0; 4.4.0.3.0
CVE-2021-36373
5.5
3%
Jul 14
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small…
Affected: 4.3.0.1.0 through 4.3.0.6.0; 4.2.0.2.0; 4.2.0.3.0; 4.4.0.0.0; 4.4.0.2.0; 4.4.0.3.0
CVE-2026-21924
5.4
0%
Jan 20
Vulnerability in the Oracle Utilities Application Framework product of Oracle Utilities Applications (component: General)
Affected: 4.3.0.3.0; 4.5.0.0.0; 4.5.0.1.1; 4.5.0.1.3; 4.5.0.2.0; 25.4; +1 more
CVE-2020-14895
5.4
1%
Oct 21
Vulnerability in the Oracle Utilities Framework product of Oracle Utilities Applications (component: System Wide)
Affected: 4.3.0.1.0 through 4.3.0.6.0; 2.2.0.0.0; 4.2.0.2.0; 4.2.0.3.0; 4.4.0.0.0; 4.4.0.2.0
Showing 8