CVE-2021-42575

Published: Oct 18, 2021Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

Affected (8)

Products: Owasp: Java Html Sanitizer · Oracle: Middleware Common Libraries And Tools, Primavera Unifier

1 product

Java Html Sanitizer

2 products

Middleware Common Libraries And Tools

Primavera Unifier

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Owasp Java Html Sanitizer	Before 20211018.2

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Oracle Middleware Common Libraries And Tools	Version 12.2.1.3.0
Oracle Middleware Common Libraries And Tools	Version 12.2.1.4.0
Oracle Primavera Unifier	From 17.7 to 17.12
Oracle Primavera Unifier	Version 18.8
Oracle Primavera Unifier	Version 19.12
Oracle Primavera Unifier	Version 20.12
Oracle Primavera Unifier	Version 21.12

References (6)

https://docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50/

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html

Source: cve@mitre.org

PatchThird Party Advisory

https://docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.