Utilities Testing Accelerator

Vendor:

First CVE: Nov 8, 2019 · Active for 6 years

27
Total CVEs
More Total CVEs than 96% of tracked products
13.5
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 62% of tracked products
3.7%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Utilities Testing Accelerator over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 8, 2019
6 years ago
Most Recent CVE
Dec 14, 2021
1,684 days ago

CVE Severity & Scoring

Utilities Testing Accelerator27 CVEs
All CVEs352,708 CVEs
MediumHigh
Attack Vector
Local3 (11.1%)
Network24 (88.9%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low11 (40.7%)
High16 (59.3%)
Unknown0 (0.0%)
User Interaction
None23 (85.2%)
Unknown0 (0.0%)
Required4 (14.8%)
Privileges Required
Low17 (63.0%)
High0 (0.0%)
None10 (37.0%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (27 CVEs).

27 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2021-39144HIGH
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute command
Aug 23, 20218.598YESYES
CVE-2021-4104HIGH
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName
Dec 14, 20217.570NONO
CVE-2021-33037MEDIUM
Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the pos
Jul 12, 20215.361NONO
CVE-2021-39146HIGH
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from
Aug 23, 20218.546NOYES
CVE-2021-39141HIGH
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from
Aug 23, 20218.546NOYES
CVE-2021-39152HIGH
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources
Aug 23, 20218.544NOYES
CVE-2020-13936HIGH
An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet c
Mar 10, 20218.840NONO
CVE-2021-36090HIGH
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This
Jul 13, 20217.531NONO
CVE-2021-39139HIGH
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from
Aug 23, 20218.830NONO
CVE-2021-35516HIGH
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This
Jul 13, 20217.530NONO
View all 27 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (27 CVEs).

CISA KEV
1 CVE
3.7% of CVEs· 97th percentile
Metasploit
1 CVE
3.7% of CVEs· 96th percentile
Nuclei
4 CVEs
14.8% of CVEs· 98th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (27 CVEs).

Media Mentions

Signals from CVEs in this product scope (27 CVEs).

Top CNAs Publishing CVEs For Utilities Testing Accelerator

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
6.0.0.3.1117.222.0%00
6.0.0.2.2117.222.0%00
6.0.0.1.1277.716.0%14