CVEDB API

Vulnerability Details CVE-2021-27906

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 55.4%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 4.3

References

Products affected by CVE-2021-27906

Apache » Pdfbox » Version: 2.0.0

cpe:2.3:a:apache:pdfbox:2.0.0
Apache » Pdfbox » Version: 2.0.1

cpe:2.3:a:apache:pdfbox:2.0.1
Apache » Pdfbox » Version: 2.0.10

cpe:2.3:a:apache:pdfbox:2.0.10
Apache » Pdfbox » Version: 2.0.11

cpe:2.3:a:apache:pdfbox:2.0.11
Apache » Pdfbox » Version: 2.0.14

cpe:2.3:a:apache:pdfbox:2.0.14
Apache » Pdfbox » Version: 2.0.15

cpe:2.3:a:apache:pdfbox:2.0.15
Apache » Pdfbox » Version: 2.0.16

cpe:2.3:a:apache:pdfbox:2.0.16
Apache » Pdfbox » Version: 2.0.17

cpe:2.3:a:apache:pdfbox:2.0.17
Apache » Pdfbox » Version: 2.0.18

cpe:2.3:a:apache:pdfbox:2.0.18
Apache » Pdfbox » Version: 2.0.19

cpe:2.3:a:apache:pdfbox:2.0.19
Apache » Pdfbox » Version: 2.0.2

cpe:2.3:a:apache:pdfbox:2.0.2
Apache » Pdfbox » Version: 2.0.20

cpe:2.3:a:apache:pdfbox:2.0.20
Apache » Pdfbox » Version: 2.0.21

cpe:2.3:a:apache:pdfbox:2.0.21
Apache » Pdfbox » Version: 2.0.22

cpe:2.3:a:apache:pdfbox:2.0.22
Apache » Pdfbox » Version: 2.0.3

cpe:2.3:a:apache:pdfbox:2.0.3
Apache » Pdfbox » Version: 2.0.4

cpe:2.3:a:apache:pdfbox:2.0.4
Apache » Pdfbox » Version: 2.0.5

cpe:2.3:a:apache:pdfbox:2.0.5
Apache » Pdfbox » Version: 2.0.6

cpe:2.3:a:apache:pdfbox:2.0.6
Apache » Pdfbox » Version: 2.0.7

cpe:2.3:a:apache:pdfbox:2.0.7
Apache » Pdfbox » Version: 2.0.8

cpe:2.3:a:apache:pdfbox:2.0.8
Apache » Pdfbox » Version: 2.0.9

cpe:2.3:a:apache:pdfbox:2.0.9
Oracle » Banking Corporate Lending Process Management » Version: 14.2.0

cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0
Oracle » Banking Corporate Lending Process Management » Version: 14.3.0

cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3.0
Oracle » Banking Corporate Lending Process Management » Version: 14.5.0

cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5.0
Oracle » Banking Credit Facilities Process Management » Version: 14.2.0

cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0
Oracle » Banking Credit Facilities Process Management » Version: 14.3.0

cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.3.0
Oracle » Banking Credit Facilities Process Management » Version: 14.5.0

cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5.0
Oracle » Banking Supply Chain Finance » Version: 14.2.0

cpe:2.3:a:oracle:banking_supply_chain_finance:14.2.0
Oracle » Banking Supply Chain Finance » Version: 14.3.0

cpe:2.3:a:oracle:banking_supply_chain_finance:14.3.0
Oracle » Banking Supply Chain Finance » Version: 14.5.0

cpe:2.3:a:oracle:banking_supply_chain_finance:14.5.0
Oracle » Banking Trade Finance Process Management » Version: 14.2.0

cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2.0
Oracle » Banking Trade Finance Process Management » Version: 14.3.0

cpe:2.3:a:oracle:banking_trade_finance_process_management:14.3.0
Oracle » Banking Trade Finance Process Management » Version: 14.5.0

cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5.0
Oracle » Banking Treasury Management » Version: 14.5

cpe:2.3:a:oracle:banking_treasury_management:14.5
Oracle » Banking Virtual Account Management » Version: 14.2.0

cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0
Oracle » Banking Virtual Account Management » Version: 14.3.0

cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0
Oracle » Banking Virtual Account Management » Version: 14.5.0

cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0
Oracle » Communications Session Report Manager » Version: 8.0.0

cpe:2.3:a:oracle:communications_session_report_manager:8.0.0
Oracle » Communications Session Report Manager » Version: 8.0.0.0

cpe:2.3:a:oracle:communications_session_report_manager:8.0.0.0
Oracle » Communications Session Report Manager » Version: 8.1.0

cpe:2.3:a:oracle:communications_session_report_manager:8.1.0
Oracle » Communications Session Report Manager » Version: 8.1.1

cpe:2.3:a:oracle:communications_session_report_manager:8.1.1
Oracle » Communications Session Report Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_session_report_manager:8.2.0
Oracle » Communications Session Report Manager » Version: 8.2.1

cpe:2.3:a:oracle:communications_session_report_manager:8.2.1
Oracle » Communications Session Report Manager » Version: 8.2.2

cpe:2.3:a:oracle:communications_session_report_manager:8.2.2
Oracle » Communications Session Report Manager » Version: 8.2.2.1

cpe:2.3:a:oracle:communications_session_report_manager:8.2.2.1
Oracle » Communications Session Report Manager » Version: 8.2.4.0

cpe:2.3:a:oracle:communications_session_report_manager:8.2.4.0
Oracle » Flexcube Universal Banking » Version: 14.0.0

cpe:2.3:a:oracle:flexcube_universal_banking:14.0.0
Oracle » Flexcube Universal Banking » Version: 14.1.0

cpe:2.3:a:oracle:flexcube_universal_banking:14.1.0
Oracle » Flexcube Universal Banking » Version: 14.2.0

cpe:2.3:a:oracle:flexcube_universal_banking:14.2.0
Oracle » Flexcube Universal Banking » Version: 14.3.0

cpe:2.3:a:oracle:flexcube_universal_banking:14.3.0
Oracle » Flexcube Universal Banking » Version: 14.5.0

cpe:2.3:a:oracle:flexcube_universal_banking:14.5.0
Oracle » Hyperion Financial Reporting » Version: 11.1.2.4

cpe:2.3:a:oracle:hyperion_financial_reporting:11.1.2.4
Oracle » Hyperion Financial Reporting » Version: 11.2.6.0

cpe:2.3:a:oracle:hyperion_financial_reporting:11.2.6.0
Oracle » Hyperion Infrastructure Technology » Version: 11.1.2.4

cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4
Oracle » Hyperion Infrastructure Technology » Version: 11.1.2.6.0

cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.6.0
Oracle » Hyperion Infrastructure Technology » Version: 11.2.5.0

cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.2.5.0
Oracle » Hyperion Infrastructure Technology » Version: 11.2.6.0

cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.2.6.0
Oracle » Hyperion Infrastructure Technology » Version: 11.2.7.0

cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.2.7.0
Oracle » Outside In Technology » Version: 8.5.5

cpe:2.3:a:oracle:outside_in_technology:8.5.5
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.58

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.59

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59
Oracle » Primavera Unifier » Version: 17.10

cpe:2.3:a:oracle:primavera_unifier:17.10
Oracle » Primavera Unifier » Version: 17.11

cpe:2.3:a:oracle:primavera_unifier:17.11
Oracle » Primavera Unifier » Version: 17.12

cpe:2.3:a:oracle:primavera_unifier:17.12
Oracle » Primavera Unifier » Version: 17.7

cpe:2.3:a:oracle:primavera_unifier:17.7
Oracle » Primavera Unifier » Version: 17.8

cpe:2.3:a:oracle:primavera_unifier:17.8
Oracle » Primavera Unifier » Version: 17.9

cpe:2.3:a:oracle:primavera_unifier:17.9
Oracle » Primavera Unifier » Version: 18.8

cpe:2.3:a:oracle:primavera_unifier:18.8
Oracle » Primavera Unifier » Version: 19.12

cpe:2.3:a:oracle:primavera_unifier:19.12
Oracle » Primavera Unifier » Version: 20.12

cpe:2.3:a:oracle:primavera_unifier:20.12
Oracle » Retail Customer Management And Segmentation Foundation » Version: 19.0

cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0
Oracle » Retail Xstore Point Of Service » Version: 16.0.6

cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6
Oracle » Retail Xstore Point Of Service » Version: 17.0.4

cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4
Oracle » Retail Xstore Point Of Service » Version: 18.0.3

cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3
Oracle » Retail Xstore Point Of Service » Version: 19.0.2

cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2
Oracle » Retail Xstore Point Of Service » Version: 20.0.1

cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1
Oracle » Webcenter Sites » Version: 12.2.1.3.0

cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0
Oracle » Webcenter Sites » Version: 12.2.1.4.0

cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0
Fedoraproject » Fedora » Version: 32

cpe:2.3:o:fedoraproject:fedora:32
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34
Oracle » Communications Messaging Server » Version: 8.1

cpe:2.3:o:oracle:communications_messaging_server:8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-27906

Products

Pricing

Contact Us