csirt@kutim:~/threat-intel/cve/CVE-2021-36090

Katalog CVE

CVSS 7.5 · High EPSS 12,9%

Kerentanan Improper Handling of Length Parameter Inconsistency pada apache commons compress, oracle banking apis +27 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.

Rincian

Terbit di NVD
13 Juli 2021
Terakhir diubah
8 Oktober 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-130: Improper Handling of Length Parameter Inconsistency
EPSS (30 hari)
12,9% peluang dieksploitasi; lebih tinggi dari 96,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
apache commons compress Versi 1.0 hingga sebelum 1.21
oracle banking apis Versi 18.1 hingga 18.3
oracle banking apis Versi 19.1
oracle banking apis Versi 19.2
oracle banking apis Versi 20.1
oracle banking apis Versi 21.1
oracle banking digital experience Versi 18.1 hingga 18.3
oracle banking digital experience Versi 19.1
oracle banking digital experience Versi 19.2
oracle banking digital experience Versi 20.1
oracle banking digital experience Versi 21.1
oracle banking enterprise default management Versi 2.7.0
oracle banking party management Versi 2.7.0
oracle banking payments Versi 14.5
oracle banking platform Versi 2.6.2
oracle banking platform Versi 2.7.1
oracle banking platform Versi 2.9.0
oracle banking platform Versi 2.12.0
oracle banking trade finance Versi 14.5
oracle banking treasury management Versi 14.5
oracle business process management suite Versi 12.2.1.3.0
oracle business process management suite Versi 12.2.1.4.0
oracle commerce guided search Versi 11.3.2
oracle communications billing and revenue management Versi 12.0.0.4
oracle communications cloud native core automated test suite Versi 1.8.0
oracle communications cloud native core service communication proxy Versi 1.14.0
oracle communications cloud native core unified data repository Versi 1.14.0
oracle communications diameter intelligence hub Versi 8.0.0 hingga 8.2.3
oracle communications diameter intelligence hub Versi 8.2.3
oracle communications element manager Versi 8.2.0 hingga 8.2.4.0
oracle communications session report manager Versi 8.2.0 hingga 8.2.5.0
oracle communications session route manager Versi 8.0.0 hingga 8.2.5.0
oracle communications unified inventory management Versi 7.4.0
oracle communications unified inventory management Versi 7.4.1
oracle communications unified inventory management Versi 7.4.2
oracle communications unified inventory management Versi 7.5.0
oracle financial services analytical applications infrastructure Versi 8.0.6 hingga 8.1.1
oracle financial services crime and compliance management studio Versi 8.0.8.2.0
oracle financial services crime and compliance management studio Versi 8.0.8.3.0
oracle financial services enterprise case management Semua versi
oracle financial services enterprise case management Versi 8.0.7.2.0
oracle financial services enterprise case management Versi 8.0.8.1.0
oracle flexcube universal banking Versi 14.0.0 hingga 14.3.0
oracle flexcube universal banking Versi 12.4
oracle flexcube universal banking Versi 14.5
oracle healthcare data repository Versi 8.1.0
oracle insurance policy administration Versi 11.0.2
oracle insurance policy administration Versi 11.1.0
oracle insurance policy administration Versi 11.2.8
oracle insurance policy administration Versi 11.3.0
oracle insurance policy administration Versi 11.3.1
oracle peoplesoft enterprise peopletools Versi 8.57
oracle peoplesoft enterprise peopletools Versi 8.58
oracle peoplesoft enterprise peopletools Versi 8.59
oracle primavera gateway Versi 17.12.0 hingga 17.12.11
oracle primavera gateway Versi 18.8.0 hingga 18.8.12
oracle primavera gateway Versi 19.12.0 hingga 19.12.11
oracle primavera gateway Versi 20.12.0 hingga 20.12.7
oracle primavera unifier Versi 17.7 hingga 17.12
oracle primavera unifier Versi 18.8

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 70 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 9 Okt 2026, 12:28 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.