Utilities Framework vulnerabilities

2 known vulnerabilities in Utilities Framework from Oracle. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  XStream Remote Code Execution Exploited

  CVE-2021-39144Aug 23, 2021X-streamEPSS 98.1%

  XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affect

• 9.8 Critical severity

  Oracle Multiple Products Remote Code Execution Exploited

  CVE-2020-2555Jan 15, 2020OracleEPSS 97.1%

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticat