UT
Product
Utilities Testing Accelerator
On CISA KEVExploited in the wild
25
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 20Medium 5Low 0
Watch
Add Utilities Testing Accelerator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-39144 In wildKEV | 8.5 | Aug 23 | XStream is vulnerable to a Remote Command Execution attack Affected: 6.0.0.1.1 |
| CVE-2021-39139 | 8.8 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 6.0.0.1.1 |
| CVE-2020-13936 | 8.8 | Mar 10 | An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet… Affected: 6.0.0.1.1; 6.0.0.2.2; 6.0.0.3.1 |
| CVE-2021-39150 | 8.5 | Aug 23 | A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling Affected: 6.0.0.1.1 |
| CVE-2021-39152 | 8.5 | Aug 23 | A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling Affected: 6.0.0.1.1 |
| CVE-2021-39149 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 6.0.0.1.1 |
| CVE-2021-39148 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 6.0.0.1.1 |
| CVE-2021-39147 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 6.0.0.1.1 |
| CVE-2021-39146 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 6.0.0.1.1 |
| CVE-2021-39145 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 6.0.0.1.1 |
| CVE-2021-39141 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 6.0.0.1.1 |
| CVE-2021-39153 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 6.0.0.1.1 |
| CVE-2021-39151 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 6.0.0.1.1 |
| CVE-2021-39154 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 6.0.0.1.1 |
| CVE-2021-22118 | 7.8 | May 27 | In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary… Affected: 6.0.0.1.1; 6.0.0.2.2; 6.0.0.3.1 |
| CVE-2021-4104 | 7.5 | Dec 14 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration Affected: 6.0.0.1.1; 6.0.0.2.2; 6.0.0.3.1 |
| CVE-2021-35516 | 7.5 | Jul 13 | When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs Affected: 6.0.0.1.1; 6.0.0.2.2; 6.0.0.3.1 |
| CVE-2021-35515 | 7.5 | Jul 13 | When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop Affected: 6.0.0.1.1; 6.0.0.2.2; 6.0.0.3.1 |
| CVE-2021-36090 | 7.5 | Jul 13 | Apache Commons Compress 1.0 to 1.20 denial of service vulnerability Affected: 6.0.0.1.1; 6.0.0.2.2; 6.0.0.3.1 |
| CVE-2021-35517 | 7.5 | Jul 13 | Apache Commons Compress 1.1 to 1.20 denial of service vulnerability Affected: 6.0.0.1.1; 6.0.0.2.2; 6.0.0.3.1 |
Showing 20