CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-26271

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 69.4%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.3

References

Products affected by CVE-2021-26271

Ckeditor » Ckeditor » Version: 4.0

cpe:2.3:a:ckeditor:ckeditor:4.0
Ckeditor » Ckeditor » Version: 4.0.1

cpe:2.3:a:ckeditor:ckeditor:4.0.1
Ckeditor » Ckeditor » Version: 4.0.1.1

cpe:2.3:a:ckeditor:ckeditor:4.0.1.1
Ckeditor » Ckeditor » Version: 4.0.2

cpe:2.3:a:ckeditor:ckeditor:4.0.2
Ckeditor » Ckeditor » Version: 4.0.3

cpe:2.3:a:ckeditor:ckeditor:4.0.3
Ckeditor » Ckeditor » Version: 4.1

cpe:2.3:a:ckeditor:ckeditor:4.1
Ckeditor » Ckeditor » Version: 4.1.1

cpe:2.3:a:ckeditor:ckeditor:4.1.1
Ckeditor » Ckeditor » Version: 4.1.2

cpe:2.3:a:ckeditor:ckeditor:4.1.2
Ckeditor » Ckeditor » Version: 4.1.3

cpe:2.3:a:ckeditor:ckeditor:4.1.3
Ckeditor » Ckeditor » Version: 4.10.0

cpe:2.3:a:ckeditor:ckeditor:4.10.0
Ckeditor » Ckeditor » Version: 4.10.1

cpe:2.3:a:ckeditor:ckeditor:4.10.1
Ckeditor » Ckeditor » Version: 4.11.0

cpe:2.3:a:ckeditor:ckeditor:4.11.0
Ckeditor » Ckeditor » Version: 4.11.1

cpe:2.3:a:ckeditor:ckeditor:4.11.1
Ckeditor » Ckeditor » Version: 4.11.2

cpe:2.3:a:ckeditor:ckeditor:4.11.2
Ckeditor » Ckeditor » Version: 4.11.3

cpe:2.3:a:ckeditor:ckeditor:4.11.3
Ckeditor » Ckeditor » Version: 4.11.4

cpe:2.3:a:ckeditor:ckeditor:4.11.4
Ckeditor » Ckeditor » Version: 4.13.0

cpe:2.3:a:ckeditor:ckeditor:4.13.0
Ckeditor » Ckeditor » Version: 4.13.1

cpe:2.3:a:ckeditor:ckeditor:4.13.1
Ckeditor » Ckeditor » Version: 4.14

cpe:2.3:a:ckeditor:ckeditor:4.14
Ckeditor » Ckeditor » Version: 4.14.0

cpe:2.3:a:ckeditor:ckeditor:4.14.0
Ckeditor » Ckeditor » Version: 4.14.1

cpe:2.3:a:ckeditor:ckeditor:4.14.1
Ckeditor » Ckeditor » Version: 4.15.0

cpe:2.3:a:ckeditor:ckeditor:4.15.0
Ckeditor » Ckeditor » Version: 4.15.1

cpe:2.3:a:ckeditor:ckeditor:4.15.1
Ckeditor » Ckeditor » Version: 4.2

cpe:2.3:a:ckeditor:ckeditor:4.2
Ckeditor » Ckeditor » Version: 4.2.1

cpe:2.3:a:ckeditor:ckeditor:4.2.1
Ckeditor » Ckeditor » Version: 4.2.2

cpe:2.3:a:ckeditor:ckeditor:4.2.2
Ckeditor » Ckeditor » Version: 4.2.3

cpe:2.3:a:ckeditor:ckeditor:4.2.3
Ckeditor » Ckeditor » Version: 4.3.0

cpe:2.3:a:ckeditor:ckeditor:4.3.0
Ckeditor » Ckeditor » Version: 4.3.1

cpe:2.3:a:ckeditor:ckeditor:4.3.1
Ckeditor » Ckeditor » Version: 4.3.2

cpe:2.3:a:ckeditor:ckeditor:4.3.2
Ckeditor » Ckeditor » Version: 4.3.3

cpe:2.3:a:ckeditor:ckeditor:4.3.3
Ckeditor » Ckeditor » Version: 4.3.4

cpe:2.3:a:ckeditor:ckeditor:4.3.4
Ckeditor » Ckeditor » Version: 4.3.5

cpe:2.3:a:ckeditor:ckeditor:4.3.5
Ckeditor » Ckeditor » Version: 4.4.0

cpe:2.3:a:ckeditor:ckeditor:4.4.0
Ckeditor » Ckeditor » Version: 4.4.1

cpe:2.3:a:ckeditor:ckeditor:4.4.1
Ckeditor » Ckeditor » Version: 4.4.2

cpe:2.3:a:ckeditor:ckeditor:4.4.2
Ckeditor » Ckeditor » Version: 4.4.3

cpe:2.3:a:ckeditor:ckeditor:4.4.3
Ckeditor » Ckeditor » Version: 4.4.4

cpe:2.3:a:ckeditor:ckeditor:4.4.4
Ckeditor » Ckeditor » Version: 4.4.5

cpe:2.3:a:ckeditor:ckeditor:4.4.5
Ckeditor » Ckeditor » Version: 4.4.6

cpe:2.3:a:ckeditor:ckeditor:4.4.6
Ckeditor » Ckeditor » Version: 4.4.7

cpe:2.3:a:ckeditor:ckeditor:4.4.7
Ckeditor » Ckeditor » Version: 4.4.8

cpe:2.3:a:ckeditor:ckeditor:4.4.8
Ckeditor » Ckeditor » Version: 4.5.0

cpe:2.3:a:ckeditor:ckeditor:4.5.0
Ckeditor » Ckeditor » Version: 4.5.1

cpe:2.3:a:ckeditor:ckeditor:4.5.1
Ckeditor » Ckeditor » Version: 4.5.10

cpe:2.3:a:ckeditor:ckeditor:4.5.10
Ckeditor » Ckeditor » Version: 4.5.11

cpe:2.3:a:ckeditor:ckeditor:4.5.11
Ckeditor » Ckeditor » Version: 4.5.2

cpe:2.3:a:ckeditor:ckeditor:4.5.2
Ckeditor » Ckeditor » Version: 4.5.3

cpe:2.3:a:ckeditor:ckeditor:4.5.3
Ckeditor » Ckeditor » Version: 4.5.4

cpe:2.3:a:ckeditor:ckeditor:4.5.4
Ckeditor » Ckeditor » Version: 4.5.5

cpe:2.3:a:ckeditor:ckeditor:4.5.5
Ckeditor » Ckeditor » Version: 4.5.6

cpe:2.3:a:ckeditor:ckeditor:4.5.6
Ckeditor » Ckeditor » Version: 4.5.7

cpe:2.3:a:ckeditor:ckeditor:4.5.7
Ckeditor » Ckeditor » Version: 4.5.8

cpe:2.3:a:ckeditor:ckeditor:4.5.8
Ckeditor » Ckeditor » Version: 4.5.9

cpe:2.3:a:ckeditor:ckeditor:4.5.9
Ckeditor » Ckeditor » Version: 4.6.0

cpe:2.3:a:ckeditor:ckeditor:4.6.0
Ckeditor » Ckeditor » Version: 4.6.1

cpe:2.3:a:ckeditor:ckeditor:4.6.1
Ckeditor » Ckeditor » Version: 4.6.2

cpe:2.3:a:ckeditor:ckeditor:4.6.2
Ckeditor » Ckeditor » Version: 4.7.0

cpe:2.3:a:ckeditor:ckeditor:4.7.0
Ckeditor » Ckeditor » Version: 4.7.1

cpe:2.3:a:ckeditor:ckeditor:4.7.1
Ckeditor » Ckeditor » Version: 4.7.2

cpe:2.3:a:ckeditor:ckeditor:4.7.2
Ckeditor » Ckeditor » Version: 4.7.3

cpe:2.3:a:ckeditor:ckeditor:4.7.3
Ckeditor » Ckeditor » Version: 4.8.0

cpe:2.3:a:ckeditor:ckeditor:4.8.0
Ckeditor » Ckeditor » Version: 4.9.0

cpe:2.3:a:ckeditor:ckeditor:4.9.0
Ckeditor » Ckeditor » Version: 4.9.1

cpe:2.3:a:ckeditor:ckeditor:4.9.1
Ckeditor » Ckeditor » Version: 4.9.2

cpe:2.3:a:ckeditor:ckeditor:4.9.2
Oracle » Agile Plm » Version: 9.3.5

cpe:2.3:a:oracle:agile_plm:9.3.5
Oracle » Agile Plm » Version: 9.3.6

cpe:2.3:a:oracle:agile_plm:9.3.6
Oracle » Application Express » Version: N/A

cpe:2.3:a:oracle:application_express:-
Oracle » Application Express » Version: 18.2

cpe:2.3:a:oracle:application_express:18.2
Oracle » Application Express » Version: 19.1

cpe:2.3:a:oracle:application_express:19.1
Oracle » Application Express » Version: 19.2

cpe:2.3:a:oracle:application_express:19.2
Oracle » Application Express » Version: 20.1

cpe:2.3:a:oracle:application_express:20.1
Oracle » Application Express » Version: 20.2

cpe:2.3:a:oracle:application_express:20.2
Oracle » Application Express » Version: 3.0

cpe:2.3:a:oracle:application_express:3.0
Oracle » Application Express » Version: 3.1

cpe:2.3:a:oracle:application_express:3.1
Oracle » Application Express » Version: 3.2

cpe:2.3:a:oracle:application_express:3.2
Oracle » Application Express » Version: 4.0

cpe:2.3:a:oracle:application_express:4.0
Oracle » Application Express » Version: 4.1

cpe:2.3:a:oracle:application_express:4.1
Oracle » Application Express » Version: 4.2

cpe:2.3:a:oracle:application_express:4.2
Oracle » Application Express » Version: 5.0

cpe:2.3:a:oracle:application_express:5.0
Oracle » Application Express » Version: 5.0.4

cpe:2.3:a:oracle:application_express:5.0.4
Oracle » Application Express » Version: 5.1.0

cpe:2.3:a:oracle:application_express:5.1.0
Oracle » Application Express » Version: 5.1.1

cpe:2.3:a:oracle:application_express:5.1.1
Oracle » Application Express » Version: 5.1.2

cpe:2.3:a:oracle:application_express:5.1.2
Oracle » Application Express » Version: 5.1.2.00.09

cpe:2.3:a:oracle:application_express:5.1.2.00.09
Oracle » Application Express » Version: 5.1.3

cpe:2.3:a:oracle:application_express:5.1.3
Oracle » Application Express » Version: 5.1.3.00.05

cpe:2.3:a:oracle:application_express:5.1.3.00.05
Oracle » Application Express » Version: 5.1.4

cpe:2.3:a:oracle:application_express:5.1.4
Oracle » Application Express » Version: 5.1.4.00.08

cpe:2.3:a:oracle:application_express:5.1.4.00.08
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.0.1

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.0.1
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.2.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.2.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.3.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.3.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.6.4.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6.4.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.7.2.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7.2.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.8

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.8
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.8.0.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.8.0.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.0.9

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.9
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.1.0

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.0
Oracle » Financial Services Analytical Applications Infrastructure » Version: 8.1.1

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.1
Oracle » Jd Edwards Enterpriseone Tools » Version: N/A

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:-
Oracle » Jd Edwards Enterpriseone Tools » Version: 4.0.1.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:4.0.1.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.1

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.1
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.1.5

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.1.5
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.0.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.0.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.4.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.4.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.4.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.4.2
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.5.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.5.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.5.3

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.5.3
Oracle » Siebel Ui Framework » Version: N/A

cpe:2.3:a:oracle:siebel_ui_framework:-
Oracle » Siebel Ui Framework » Version: 16.0

cpe:2.3:a:oracle:siebel_ui_framework:16.0
Oracle » Siebel Ui Framework » Version: 16.1

cpe:2.3:a:oracle:siebel_ui_framework:16.1
Oracle » Siebel Ui Framework » Version: 17.0

cpe:2.3:a:oracle:siebel_ui_framework:17.0
Oracle » Siebel Ui Framework » Version: 18.0

cpe:2.3:a:oracle:siebel_ui_framework:18.0
Oracle » Siebel Ui Framework » Version: 18.10

cpe:2.3:a:oracle:siebel_ui_framework:18.10
Oracle » Siebel Ui Framework » Version: 18.11

cpe:2.3:a:oracle:siebel_ui_framework:18.11
Oracle » Siebel Ui Framework » Version: 18.7

cpe:2.3:a:oracle:siebel_ui_framework:18.7
Oracle » Siebel Ui Framework » Version: 18.8

cpe:2.3:a:oracle:siebel_ui_framework:18.8
Oracle » Siebel Ui Framework » Version: 18.9

cpe:2.3:a:oracle:siebel_ui_framework:18.9
Oracle » Siebel Ui Framework » Version: 19.0

cpe:2.3:a:oracle:siebel_ui_framework:19.0
Oracle » Siebel Ui Framework » Version: 19.10

cpe:2.3:a:oracle:siebel_ui_framework:19.10
Oracle » Siebel Ui Framework » Version: 19.7

cpe:2.3:a:oracle:siebel_ui_framework:19.7
Oracle » Siebel Ui Framework » Version: 19.8

cpe:2.3:a:oracle:siebel_ui_framework:19.8
Oracle » Siebel Ui Framework » Version: 20.1

cpe:2.3:a:oracle:siebel_ui_framework:20.1
Oracle » Siebel Ui Framework » Version: 20.12

cpe:2.3:a:oracle:siebel_ui_framework:20.12
Oracle » Siebel Ui Framework » Version: 20.2

cpe:2.3:a:oracle:siebel_ui_framework:20.2
Oracle » Siebel Ui Framework » Version: 20.5

cpe:2.3:a:oracle:siebel_ui_framework:20.5
Oracle » Siebel Ui Framework » Version: 20.6

cpe:2.3:a:oracle:siebel_ui_framework:20.6
Oracle » Siebel Ui Framework » Version: 20.8

cpe:2.3:a:oracle:siebel_ui_framework:20.8
Oracle » Siebel Ui Framework » Version: 21.0

cpe:2.3:a:oracle:siebel_ui_framework:21.0
Oracle » Siebel Ui Framework » Version: 21.2

cpe:2.3:a:oracle:siebel_ui_framework:21.2
Oracle » Siebel Ui Framework » Version: 8.1.1

cpe:2.3:a:oracle:siebel_ui_framework:8.1.1
Oracle » Siebel Ui Framework » Version: 8.2.2

cpe:2.3:a:oracle:siebel_ui_framework:8.2.2
Oracle » Webcenter Sites » Version: 12.2.1.3.0

cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0
Oracle » Webcenter Sites » Version: 12.2.1.4.0

cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-26271

Products

Pricing

Contact Us