CVE
CVE-2021-45105
- First Reported
- Jun 21, 2022
- Latest Reported
- Jun 21, 2022
CVE Enrichment
- CVSS
- 5.9 MEDIUM
- EPSS
- 100.00%
- EPSS Percentile
- 99.99%
- CISA KEV
- Not listed
Description
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- security@apache.org
- Published
- 18-Dec-2021 19:15
- Last Modified
- 25-Aug-2026 23:28
- EPSS Date
- 2026-10-12
- CWE
- CWE-20, CWE-674
CVSS Vector
CVSS:3.1 AV:N /
AC:H /
PR:N /
UI:N /
S:U /
C:N /
I:N /
A:H
Affected Products / Versions
- apache / log4j
Version / affected range: * · from (inclusive) 2.0 · before (exclusive) 2.3.1
cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:* - apache / log4j
Version / affected range: * · from (inclusive) 2.4 · before (exclusive) 2.12.3
cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:* - apache / log4j
Version / affected range: * · from (inclusive) 2.13.0 · through (inclusive) 2.16.0
cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:* - netapp / cloud_manager
Version / affected range: -
cpe:2.3:a:netapp:cloud_manager:-:*:*:*:*:*:*:* - debian / debian_linux
Version / affected range: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* - debian / debian_linux
Version / affected range: 11.0
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* - sonicwall / email_security
Version / affected range: * · through (inclusive) 10.0.12
cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:* - sonicwall / network_security_manager
Version / affected range: * · from (inclusive) 2.0 · before (exclusive) 3.0
cpe:2.3:a:sonicwall:network_security_manager:*:*:*:*:on-premises:*:*:* - sonicwall / network_security_manager
Version / affected range: * · from (inclusive) 2.0 · before (exclusive) 3.0
cpe:2.3:a:sonicwall:network_security_manager:*:*:*:*:saas:*:*:* - sonicwall / web_application_firewall
Version / affected range: * · from (inclusive) 3.0.0 · before (exclusive) 3.1.0
cpe:2.3:a:sonicwall:web_application_firewall:*:*:*:*:*:*:*:* - sonicwall / 6bk1602-0aa12-0tp0_firmware
Version / affected range: * · before (exclusive) 2.7.0
cpe:2.3:o:sonicwall:6bk1602-0aa12-0tp0_firmware:*:*:*:*:*:*:*:* - sonicwall / 6bk1602-0aa22-0tp0_firmware
Version / affected range: * · before (exclusive) 2.7.0
cpe:2.3:o:sonicwall:6bk1602-0aa22-0tp0_firmware:*:*:*:*:*:*:*:* - sonicwall / 6bk1602-0aa32-0tp0_firmware
Version / affected range: * · before (exclusive) 2.7.0
cpe:2.3:o:sonicwall:6bk1602-0aa32-0tp0_firmware:*:*:*:*:*:*:*:* - sonicwall / 6bk1602-0aa42-0tp0_firmware
Version / affected range: * · before (exclusive) 2.7.0
cpe:2.3:o:sonicwall:6bk1602-0aa42-0tp0_firmware:*:*:*:*:*:*:*:* - sonicwall / 6bk1602-0aa52-0tp0_firmware
Version / affected range: * · before (exclusive) 2.7.0
cpe:2.3:o:sonicwall:6bk1602-0aa52-0tp0_firmware:*:*:*:*:*:*:*:* - oracle / agile_engineering_data_management
Version / affected range: 6.2.1.0
cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:* - oracle / agile_plm_mcad_connector
Version / affected range: 3.6
cpe:2.3:a:oracle:agile_plm_mcad_connector:3.6:*:*:*:*:*:*:* - oracle / agile_product_lifecycle_management
Version / affected range: 9.3.6
cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:* - oracle / autovue_for_agile_product_lifecycle_management
Version / affected range: 21.0.2
cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:* - oracle / banking_deposits_and_lines_of_credit_servicing
Version / affected range: 2.12.0
cpe:2.3:a:oracle:banking_deposits_and_lines_of_credit_servicing:2.12.0:*:*:*:*:*:*:* - oracle / banking_enterprise_default_management
Version / affected range: 2.7.1
cpe:2.3:a:oracle:banking_enterprise_default_management:2.7.1:*:*:*:*:*:*:* - oracle / banking_enterprise_default_management
Version / affected range: 2.12.0
cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:* - oracle / banking_loans_servicing
Version / affected range: 2.12.0
cpe:2.3:a:oracle:banking_loans_servicing:2.12.0:*:*:*:*:*:*:* - oracle / banking_party_management
Version / affected range: 2.7.0
cpe:2.3:a:oracle:banking_party_management:2.7.0:*:*:*:*:*:*:* - oracle / banking_payments
Version / affected range: 14.5
cpe:2.3:a:oracle:banking_payments:14.5:*:*:*:*:*:*:* - oracle / banking_platform
Version / affected range: 2.6.2
cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:* - oracle / banking_platform
Version / affected range: 2.7.1
cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:* - oracle / banking_platform
Version / affected range: 2.12.0
cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:* - oracle / banking_trade_finance
Version / affected range: 14.5
cpe:2.3:a:oracle:banking_trade_finance:14.5:*:*:*:*:*:*:* - oracle / banking_treasury_management
Version / affected range: 14.5
cpe:2.3:a:oracle:banking_treasury_management:14.5:*:*:*:*:*:*:* - oracle / business_intelligence
Version / affected range: 5.5.0.0.0
cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:* - oracle / communications_asap
Version / affected range: 7.3
cpe:2.3:a:oracle:communications_asap:7.3:*:*:*:*:*:*:* - oracle / communications_billing_and_revenue_management
Version / affected range: 12.0.0.4
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.4:*:*:*:*:*:*:* - oracle / communications_billing_and_revenue_management
Version / affected range: 12.0.0.5
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.5:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_console
Version / affected range: 1.9.0
cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_function_cloud_native_environment
Version / affected range: 1.10.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_repository_function
Version / affected range: 1.15.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_repository_function
Version / affected range: 1.15.1
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.1:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_slice_selection_function
Version / affected range: 1.8.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.8.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_policy
Version / affected range: 1.15.0
cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_security_edge_protection_proxy
Version / affected range: 1.7.0
cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.7.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_service_communication_proxy
Version / affected range: 1.15.0
cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.15.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_unified_data_repository
Version / affected range: 1.15.0
cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.15.0:*:*:*:*:*:*:* - oracle / communications_convergence
Version / affected range: 3.0.2.2.0
cpe:2.3:a:oracle:communications_convergence:3.0.2.2.0:*:*:*:*:*:*:* - oracle / communications_convergence
Version / affected range: 3.0.3.0
cpe:2.3:a:oracle:communications_convergence:3.0.3.0:*:*:*:*:*:*:* - oracle / communications_convergent_charging_controller
Version / affected range: * · from (inclusive) 12.0.1.0.0 · through (inclusive) 12.0.4.0.0
cpe:2.3:a:oracle:communications_convergent_charging_controller:*:*:*:*:*:*:*:* - oracle / communications_convergent_charging_controller
Version / affected range: 6.0.1.0.0
cpe:2.3:a:oracle:communications_convergent_charging_controller:6.0.1.0.0:*:*:*:*:*:*:* - oracle / communications_diameter_signaling_router
Version / affected range: * · from (inclusive) 8.3.0.0 · through (inclusive) 8.5.1.0
cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:* - oracle / communications_eagle_element_management_system
Version / affected range: 46.6
cpe:2.3:a:oracle:communications_eagle_element_management_system:46.6:*:*:*:*:*:*:* - oracle / communications_eagle_ftp_table_base_retrieval
Version / affected range: 4.5
cpe:2.3:a:oracle:communications_eagle_ftp_table_base_retrieval:4.5:*:*:*:*:*:*:* - oracle / communications_element_manager
Version / affected range: * · before (exclusive) 9.0
cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:* - oracle / communications_evolved_communications_application_server
Version / affected range: 7.1
cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1:*:*:*:*:*:*:* - oracle / communications_interactive_session_recorder
Version / affected range: 6.3
cpe:2.3:a:oracle:communications_interactive_session_recorder:6.3:*:*:*:*:*:*:* - oracle / communications_interactive_session_recorder
Version / affected range: 6.4
cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:* - oracle / communications_ip_service_activator
Version / affected range: 7.4.0
cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:* - oracle / communications_messaging_server
Version / affected range: 8.1
cpe:2.3:a:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:* - oracle / communications_network_charging_and_control
Version / affected range: * · from (inclusive) 12.0.1.0.0 · through (inclusive) 12.0.4.0.0
cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:* - oracle / communications_network_charging_and_control
Version / affected range: 6.0.1.0.0
cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1.0.0:*:*:*:*:*:*:* - oracle / communications_network_integrity
Version / affected range: 7.3.6
cpe:2.3:a:oracle:communications_network_integrity:7.3.6:*:*:*:*:*:*:* - oracle / communications_performance_intelligence_center
Version / affected range: 10.4.0.3
cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4.0.3:*:*:*:*:*:*:* - oracle / communications_pricing_design_center
Version / affected range: 12.0.0.4
cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.4:*:*:*:*:*:*:* - oracle / communications_pricing_design_center
Version / affected range: 12.0.0.5
cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.5:*:*:*:*:*:*:* - oracle / communications_service_broker
Version / affected range: 6.2
cpe:2.3:a:oracle:communications_service_broker:6.2:*:*:*:*:*:*:* - oracle / communications_services_gatekeeper
Version / affected range: 7.0
cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* - oracle / communications_session_report_manager
Version / affected range: * · before (exclusive) 9.0
cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:* - oracle / communications_session_route_manager
Version / affected range: * · before (exclusive) 9.0
cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:* - oracle / communications_unified_inventory_management
Version / affected range: 7.3.5
cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:* - oracle / communications_unified_inventory_management
Version / affected range: 7.4.1
cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:* - oracle / communications_unified_inventory_management
Version / affected range: 7.4.2
cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.2:*:*:*:*:*:*:* - oracle / communications_user_data_repository
Version / affected range: 12.4
cpe:2.3:a:oracle:communications_user_data_repository:12.4:*:*:*:*:*:*:* - oracle / communications_webrtc_session_controller
Version / affected range: 7.2.0.0
cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.0.0:*:*:*:*:*:*:* - oracle / communications_webrtc_session_controller
Version / affected range: 7.2.1
cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.1:*:*:*:*:*:*:* - oracle / data_integrator
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:* - oracle / data_integrator
Version / affected range: 12.2.1.4.0
cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:* - oracle / e-business_suite
Version / affected range: 12.2
cpe:2.3:a:oracle:e-business_suite:12.2:*:*:*:*:*:*:* - oracle / enterprise_manager_base_platform
Version / affected range: 13.4.0.0
cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:* - oracle / enterprise_manager_base_platform
Version / affected range: 13.5.0.0
cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0:*:*:*:*:*:*:* - oracle / enterprise_manager_for_peoplesoft
Version / affected range: 13.4.1.1
cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.4.1.1:*:*:*:*:*:*:* - oracle / enterprise_manager_for_peoplesoft
Version / affected range: 13.5.1.1
cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.5.1.1:*:*:*:*:*:*:* - oracle / enterprise_manager_ops_center
Version / affected range: 12.4.0.0
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* - oracle / financial_services_analytical_applications_infrastructure
Version / affected range: * · from (inclusive) 8.0.7 · through (inclusive) 8.1.1
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* - oracle / financial_services_model_management_and_governance
Version / affected range: 8.0.8.0.0
cpe:2.3:a:oracle:financial_services_model_management_and_governance:8.0.8.0.0:*:*:*:*:*:*:* - oracle / financial_services_model_management_and_governance
Version / affected range: 8.1.0.0.0
cpe:2.3:a:oracle:financial_services_model_management_and_governance:8.1.0.0.0:*:*:*:*:*:*:* - oracle / financial_services_model_management_and_governance
Version / affected range: 8.1.1.0.0
cpe:2.3:a:oracle:financial_services_model_management_and_governance:8.1.1.0.0:*:*:*:*:*:*:* - oracle / flexcube_universal_banking
Version / affected range: * · from (inclusive) 12.1.0 · through (inclusive) 12.4
cpe:2.3:a:oracle:flexcube_universal_banking:*:*:*:*:*:*:*:* - oracle / flexcube_universal_banking
Version / affected range: * · from (inclusive) 14.0.0 · through (inclusive) 14.3.0
cpe:2.3:a:oracle:flexcube_universal_banking:*:*:*:*:*:*:*:* - oracle / flexcube_universal_banking
Version / affected range: 11.83.3
cpe:2.3:a:oracle:flexcube_universal_banking:11.83.3:*:*:*:*:*:*:* - oracle / flexcube_universal_banking
Version / affected range: 14.5
cpe:2.3:a:oracle:flexcube_universal_banking:14.5:*:*:*:*:*:*:* - oracle / health_sciences_empirica_signal
Version / affected range: 9.1.0.6
cpe:2.3:a:oracle:health_sciences_empirica_signal:9.1.0.6:*:*:*:*:*:*:* - oracle / health_sciences_empirica_signal
Version / affected range: 9.2.0.0
cpe:2.3:a:oracle:health_sciences_empirica_signal:9.2.0.0:*:*:*:*:*:*:* - oracle / health_sciences_inform
Version / affected range: 6.2.1.1
cpe:2.3:a:oracle:health_sciences_inform:6.2.1.1:*:*:*:*:*:*:* - oracle / health_sciences_inform
Version / affected range: 6.3.2.1
cpe:2.3:a:oracle:health_sciences_inform:6.3.2.1:*:*:*:*:*:*:* - oracle / health_sciences_inform
Version / affected range: 7.0.0.0
cpe:2.3:a:oracle:health_sciences_inform:7.0.0.0:*:*:*:*:*:*:* - oracle / health_sciences_information_manager
Version / affected range: * · from (inclusive) 3.0.1 · through (inclusive) 3.0.4
cpe:2.3:a:oracle:health_sciences_information_manager:*:*:*:*:*:*:*:* - oracle / healthcare_data_repository
Version / affected range: 8.1.1
cpe:2.3:a:oracle:healthcare_data_repository:8.1.1:*:*:*:*:*:*:* - oracle / healthcare_foundation
Version / affected range: * · from (inclusive) 7.3.0.1 · through (inclusive) 7.3.0.4
cpe:2.3:a:oracle:healthcare_foundation:*:*:*:*:*:*:*:* - oracle / healthcare_master_person_index
Version / affected range: 5.0.1
cpe:2.3:a:oracle:healthcare_master_person_index:5.0.1:*:*:*:*:*:*:* - oracle / healthcare_translational_research
Version / affected range: 4.1.0
cpe:2.3:a:oracle:healthcare_translational_research:4.1.0:*:*:*:*:*:*:* - oracle / healthcare_translational_research
Version / affected range: 4.1.1
cpe:2.3:a:oracle:healthcare_translational_research:4.1.1:*:*:*:*:*:*:* - oracle / hospitality_suite8
Version / affected range: 8.13.0
cpe:2.3:a:oracle:hospitality_suite8:8.13.0:*:*:*:*:*:*:* - oracle / hospitality_suite8
Version / affected range: 8.14.0
cpe:2.3:a:oracle:hospitality_suite8:8.14.0:*:*:*:*:*:*:* - oracle / hospitality_token_proxy_service
Version / affected range: 19.2
cpe:2.3:a:oracle:hospitality_token_proxy_service:19.2:*:*:*:*:*:*:* - oracle / hyperion_bi\+
Version / affected range: * · before (exclusive) 11.2.8.0
cpe:2.3:a:oracle:hyperion_bi\+:*:*:*:*:*:*:*:* - oracle / hyperion_data_relationship_management
Version / affected range: * · before (exclusive) 11.2.8.0
cpe:2.3:a:oracle:hyperion_data_relationship_management:*:*:*:*:*:*:*:* - oracle / hyperion_infrastructure_technology
Version / affected range: * · before (exclusive) 11.2.8.0
cpe:2.3:a:oracle:hyperion_infrastructure_technology:*:*:*:*:*:*:*:* - oracle / hyperion_planning
Version / affected range: * · before (exclusive) 11.2.8.0
cpe:2.3:a:oracle:hyperion_planning:*:*:*:*:*:*:*:* - oracle / hyperion_profitability_and_cost_management
Version / affected range: * · before (exclusive) 11.2.8.0
cpe:2.3:a:oracle:hyperion_profitability_and_cost_management:*:*:*:*:*:*:*:* - oracle / hyperion_tax_provision
Version / affected range: * · before (exclusive) 11.2.8.0
cpe:2.3:a:oracle:hyperion_tax_provision:*:*:*:*:*:*:*:* - oracle / identity_management_suite
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:identity_management_suite:12.2.1.3.0:*:*:*:*:*:*:* - oracle / identity_management_suite
Version / affected range: 12.2.1.4.0
cpe:2.3:a:oracle:identity_management_suite:12.2.1.4.0:*:*:*:*:*:*:* - oracle / identity_manager_connector
Version / affected range: 9.1.0
cpe:2.3:a:oracle:identity_manager_connector:9.1.0:*:*:*:*:*:*:* - oracle / instantis_enterprisetrack
Version / affected range: 17.1
cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:* - oracle / instantis_enterprisetrack
Version / affected range: 17.2
cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:* - oracle / instantis_enterprisetrack
Version / affected range: 17.3
cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:* - oracle / insurance_data_gateway
Version / affected range: 1.0.1
cpe:2.3:a:oracle:insurance_data_gateway:1.0.1:*:*:*:*:*:*:* - oracle / insurance_insbridge_rating_and_underwriting
Version / affected range: * · from (inclusive) 5.4 · through (inclusive) 5.6.0.0
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:* - oracle / insurance_insbridge_rating_and_underwriting
Version / affected range: 5.2.0
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.2.0:*:*:*:*:*:*:* - oracle / insurance_insbridge_rating_and_underwriting
Version / affected range: 5.6.1.0
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:* - oracle / jdeveloper
Version / affected range: 12.2.1.4.0
cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:* - oracle / managed_file_transfer
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0:*:*:*:*:*:*:* - oracle / managed_file_transfer
Version / affected range: 12.2.1.4.0
cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:*:*:*:*:*:*:* - oracle / management_cloud_engine
Version / affected range: 1.5.0
cpe:2.3:a:oracle:management_cloud_engine:1.5.0:*:*:*:*:*:*:* - oracle / mysql_enterprise_monitor
Version / affected range: * · through (inclusive) 8.0.29
cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* - oracle / payment_interface
Version / affected range: 19.1
cpe:2.3:a:oracle:payment_interface:19.1:*:*:*:*:*:*:* - oracle / payment_interface
Version / affected range: 20.3
cpe:2.3:a:oracle:payment_interface:20.3:*:*:*:*:*:*:* - oracle / peoplesoft_enterprise_peopletools
Version / affected range: 8.58
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* - oracle / peoplesoft_enterprise_peopletools
Version / affected range: 8.59
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:* - oracle / primavera_gateway
Version / affected range: * · from (inclusive) 17.12.0 · through (inclusive) 17.12.11
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* - oracle / primavera_gateway
Version / affected range: * · from (inclusive) 18.8.0 · through (inclusive) 18.8.13
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* - oracle / primavera_gateway
Version / affected range: * · from (inclusive) 19.12.0 · through (inclusive) 19.12.12
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* - oracle / primavera_gateway
Version / affected range: * · from (inclusive) 20.12.0 · through (inclusive) 20.12.7
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* - oracle / primavera_gateway
Version / affected range: 21.12.0
cpe:2.3:a:oracle:primavera_gateway:21.12.0:*:*:*:*:*:*:* - oracle / primavera_p6_enterprise_project_portfolio_management
Version / affected range: * · from (inclusive) 19.12.0.0 · through (inclusive) 19.12.18.0
cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* - oracle / primavera_p6_enterprise_project_portfolio_management
Version / affected range: * · from (inclusive) 20.12.0.0 · through (inclusive) 20.12.12.0
cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* - oracle / primavera_p6_enterprise_project_portfolio_management
Version / affected range: 21.12.0.0
cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:21.12.0.0:*:*:*:*:*:*:* - oracle / primavera_unifier
Version / affected range: 18.8
cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* - oracle / primavera_unifier
Version / affected range: 19.12
cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:* - oracle / primavera_unifier
Version / affected range: 20.12
cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:* - oracle / primavera_unifier
Version / affected range: 21.12
cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:* - oracle / retail_back_office
Version / affected range: 14.1
cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* - oracle / retail_central_office
Version / affected range: 14.1
cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:* - oracle / retail_customer_insights
Version / affected range: 15.0.2
cpe:2.3:a:oracle:retail_customer_insights:15.0.2:*:*:*:*:*:*:* - oracle / retail_customer_insights
Version / affected range: 16.0.2
cpe:2.3:a:oracle:retail_customer_insights:16.0.2:*:*:*:*:*:*:* - oracle / retail_data_extractor_for_merchandising
Version / affected range: 15.0.2
cpe:2.3:a:oracle:retail_data_extractor_for_merchandising:15.0.2:*:*:*:*:*:*:* - oracle / retail_data_extractor_for_merchandising
Version / affected range: 16.0.2
cpe:2.3:a:oracle:retail_data_extractor_for_merchandising:16.0.2:*:*:*:*:*:*:* - oracle / retail_eftlink
Version / affected range: 16.0.3
cpe:2.3:a:oracle:retail_eftlink:16.0.3:*:*:*:*:*:*:* - oracle / retail_eftlink
Version / affected range: 17.0.2
cpe:2.3:a:oracle:retail_eftlink:17.0.2:*:*:*:*:*:*:* - oracle / retail_eftlink
Version / affected range: 18.0.1
cpe:2.3:a:oracle:retail_eftlink:18.0.1:*:*:*:*:*:*:* - oracle / retail_eftlink
Version / affected range: 19.0.1
cpe:2.3:a:oracle:retail_eftlink:19.0.1:*:*:*:*:*:*:* - oracle / retail_eftlink
Version / affected range: 20.0.1
cpe:2.3:a:oracle:retail_eftlink:20.0.1:*:*:*:*:*:*:* - oracle / retail_eftlink
Version / affected range: 21.0.0
cpe:2.3:a:oracle:retail_eftlink:21.0.0:*:*:*:*:*:*:* - oracle / retail_financial_integration
Version / affected range: * · from (inclusive) 16.0.1 · through (inclusive) 16.0.3
cpe:2.3:a:oracle:retail_financial_integration:*:*:*:*:*:*:*:* - oracle / retail_financial_integration
Version / affected range: 14.1.3.2
cpe:2.3:a:oracle:retail_financial_integration:14.1.3.2:*:*:*:*:*:*:* - oracle / retail_financial_integration
Version / affected range: 15.0.3.1
cpe:2.3:a:oracle:retail_financial_integration:15.0.3.1:*:*:*:*:*:*:* - oracle / retail_financial_integration
Version / affected range: 19.0.0
cpe:2.3:a:oracle:retail_financial_integration:19.0.0:*:*:*:*:*:*:* - oracle / retail_financial_integration
Version / affected range: 19.0.1
cpe:2.3:a:oracle:retail_financial_integration:19.0.1:*:*:*:*:*:*:* - oracle / retail_integration_bus
Version / affected range: * · from (inclusive) 16.0.1 · through (inclusive) 16.0.3
cpe:2.3:a:oracle:retail_integration_bus:*:*:*:*:*:*:*:* - oracle / retail_integration_bus
Version / affected range: * · from (inclusive) 19.0.0 · through (inclusive) 19.0.1.0
cpe:2.3:a:oracle:retail_integration_bus:*:*:*:*:*:*:*:* - oracle / retail_integration_bus
Version / affected range: 14.1.3
cpe:2.3:a:oracle:retail_integration_bus:14.1.3:*:*:*:*:*:*:* - oracle / retail_integration_bus
Version / affected range: 14.1.3.2
cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2:*:*:*:*:*:*:* - oracle / retail_integration_bus
Version / affected range: 15.0.3.1
cpe:2.3:a:oracle:retail_integration_bus:15.0.3.1:*:*:*:*:*:*:* - oracle / retail_integration_bus
Version / affected range: 19.0.0
cpe:2.3:a:oracle:retail_integration_bus:19.0.0:*:*:*:*:*:*:* - oracle / retail_integration_bus
Version / affected range: 19.0.1
cpe:2.3:a:oracle:retail_integration_bus:19.0.1:*:*:*:*:*:*:* - oracle / retail_invoice_matching
Version / affected range: 15.0.3
cpe:2.3:a:oracle:retail_invoice_matching:15.0.3:*:*:*:*:*:*:* - oracle / retail_invoice_matching
Version / affected range: 16.0.3
cpe:2.3:a:oracle:retail_invoice_matching:16.0.3:*:*:*:*:*:*:* - oracle / retail_merchandising_system
Version / affected range: 16.0.3
cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:* - oracle / retail_merchandising_system
Version / affected range: 19.0.1
cpe:2.3:a:oracle:retail_merchandising_system:19.0.1:*:*:*:*:*:*:* - oracle / retail_order_broker
Version / affected range: 16.0
cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:* - oracle / retail_order_broker
Version / affected range: 18.0
cpe:2.3:a:oracle:retail_order_broker:18.0:*:*:*:*:*:*:* - oracle / retail_order_broker
Version / affected range: 19.1
cpe:2.3:a:oracle:retail_order_broker:19.1:*:*:*:*:*:*:* - oracle / retail_order_management_system
Version / affected range: 19.5
cpe:2.3:a:oracle:retail_order_management_system:19.5:*:*:*:*:*:*:* - oracle / retail_point-of-service
Version / affected range: 14.1
cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:* - oracle / retail_predictive_application_server
Version / affected range: 14.1.3.46
cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3.46:*:*:*:*:*:*:* - oracle / retail_predictive_application_server
Version / affected range: 15.0.3.115
cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3.115:*:*:*:*:*:*:* - oracle / retail_predictive_application_server
Version / affected range: 16.0.3.240
cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.240:*:*:*:*:*:*:* - oracle / retail_price_management
Version / affected range: 13.2
cpe:2.3:a:oracle:retail_price_management:13.2:*:*:*:*:*:*:* - oracle / retail_price_management
Version / affected range: 14.0.4
cpe:2.3:a:oracle:retail_price_management:14.0.4:*:*:*:*:*:*:* - oracle / retail_price_management
Version / affected range: 14.1.3.0
cpe:2.3:a:oracle:retail_price_management:14.1.3.0:*:*:*:*:*:*:* - oracle / retail_price_management
Version / affected range: 15.0.3.0
cpe:2.3:a:oracle:retail_price_management:15.0.3.0:*:*:*:*:*:*:* - oracle / retail_price_management
Version / affected range: 16.0.3.0
cpe:2.3:a:oracle:retail_price_management:16.0.3.0:*:*:*:*:*:*:* - oracle / retail_returns_management
Version / affected range: 14.1
cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* - oracle / retail_service_backbone
Version / affected range: * · from (inclusive) 16.0.1 · through (inclusive) 16.0.3
cpe:2.3:a:oracle:retail_service_backbone:*:*:*:*:*:*:*:* - oracle / retail_service_backbone
Version / affected range: 14.1.3
cpe:2.3:a:oracle:retail_service_backbone:14.1.3:*:*:*:*:*:*:* - oracle / retail_service_backbone
Version / affected range: 14.1.3.2
cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2:*:*:*:*:*:*:* - oracle / retail_service_backbone
Version / affected range: 15.0.3.1
cpe:2.3:a:oracle:retail_service_backbone:15.0.3.1:*:*:*:*:*:*:* - oracle / retail_service_backbone
Version / affected range: 19.0.0
cpe:2.3:a:oracle:retail_service_backbone:19.0.0:*:*:*:*:*:*:* - oracle / retail_service_backbone
Version / affected range: 19.0.1
cpe:2.3:a:oracle:retail_service_backbone:19.0.1:*:*:*:*:*:*:* - oracle / retail_service_backbone
Version / affected range: 19.0.1.0
cpe:2.3:a:oracle:retail_service_backbone:19.0.1.0:*:*:*:*:*:*:* - oracle / retail_store_inventory_management
Version / affected range: 14.0.4.13
cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4.13:*:*:*:*:*:*:* - oracle / retail_store_inventory_management
Version / affected range: 14.1.3.5
cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3.5:*:*:*:*:*:*:* - oracle / retail_store_inventory_management
Version / affected range: 14.1.3.14
cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3.14:*:*:*:*:*:*:* - oracle / retail_store_inventory_management
Version / affected range: 15.0.3.3
cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3.3:*:*:*:*:*:*:* - oracle / retail_store_inventory_management
Version / affected range: 15.0.3.8
cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3.8:*:*:*:*:*:*:* - oracle / retail_store_inventory_management
Version / affected range: 16.0.3.7
cpe:2.3:a:oracle:retail_store_inventory_management:16.0.3.7:*:*:*:*:*:*:* - oracle / siebel_ui_framework
Version / affected range: * · through (inclusive) 21.12
cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:* - oracle / sql_developer
Version / affected range: * · before (exclusive) 21.4.2
cpe:2.3:a:oracle:sql_developer:*:*:*:*:*:*:*:* - oracle / taleo_platform
Version / affected range: * · before (exclusive) 22.1
cpe:2.3:a:oracle:taleo_platform:*:*:*:*:*:*:*:* - oracle / utilities_framework
Version / affected range: * · from (inclusive) 4.3.0.1.0 · through (inclusive) 4.3.0.6.0
cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:* - oracle / utilities_framework
Version / affected range: 4.4.0.0.0
cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0:*:*:*:*:*:*:* - oracle / utilities_framework
Version / affected range: 4.4.0.2.0
cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0:*:*:*:*:*:*:* - oracle / utilities_framework
Version / affected range: 4.4.0.3.0
cpe:2.3:a:oracle:utilities_framework:4.4.0.3.0:*:*:*:*:*:*:* - oracle / webcenter_portal
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:* - oracle / webcenter_portal
Version / affected range: 12.2.1.4.0
cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:* - oracle / webcenter_sites
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:* - oracle / webcenter_sites
Version / affected range: 12.2.1.4.0
cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:* - oracle / weblogic_server
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* - oracle / weblogic_server
Version / affected range: 12.2.1.4.0
cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* - oracle / weblogic_server
Version / affected range: 14.1.1.0.0
cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
CVE (3)
Malware (4)
People (3)
Threat Actors (2)
MITRE ATT&CK (4)
Vendors (1)
Products (16)
Tools (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.