CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 48.5%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 4.3

References

Products affected by CVE-2021-28657

Apache » Tika » Version: 0.1

cpe:2.3:a:apache:tika:0.1
Apache » Tika » Version: 0.10

cpe:2.3:a:apache:tika:0.10
Apache » Tika » Version: 0.2

cpe:2.3:a:apache:tika:0.2
Apache » Tika » Version: 0.3

cpe:2.3:a:apache:tika:0.3
Apache » Tika » Version: 0.4

cpe:2.3:a:apache:tika:0.4
Apache » Tika » Version: 0.5

cpe:2.3:a:apache:tika:0.5
Apache » Tika » Version: 0.6

cpe:2.3:a:apache:tika:0.6
Apache » Tika » Version: 0.7

cpe:2.3:a:apache:tika:0.7
Apache » Tika » Version: 0.8

cpe:2.3:a:apache:tika:0.8
Apache » Tika » Version: 0.9

cpe:2.3:a:apache:tika:0.9
Apache » Tika » Version: 1.0

cpe:2.3:a:apache:tika:1.0
Apache » Tika » Version: 1.1

cpe:2.3:a:apache:tika:1.1
Apache » Tika » Version: 1.10

cpe:2.3:a:apache:tika:1.10
Apache » Tika » Version: 1.11

cpe:2.3:a:apache:tika:1.11
Apache » Tika » Version: 1.12

cpe:2.3:a:apache:tika:1.12
Apache » Tika » Version: 1.13

cpe:2.3:a:apache:tika:1.13
Apache » Tika » Version: 1.14

cpe:2.3:a:apache:tika:1.14
Apache » Tika » Version: 1.15

cpe:2.3:a:apache:tika:1.15
Apache » Tika » Version: 1.16

cpe:2.3:a:apache:tika:1.16
Apache » Tika » Version: 1.17

cpe:2.3:a:apache:tika:1.17
Apache » Tika » Version: 1.18

cpe:2.3:a:apache:tika:1.18
Apache » Tika » Version: 1.19

cpe:2.3:a:apache:tika:1.19
Apache » Tika » Version: 1.19.1

cpe:2.3:a:apache:tika:1.19.1
Apache » Tika » Version: 1.2

cpe:2.3:a:apache:tika:1.2
Apache » Tika » Version: 1.20

cpe:2.3:a:apache:tika:1.20
Apache » Tika » Version: 1.21

cpe:2.3:a:apache:tika:1.21
Apache » Tika » Version: 1.22

cpe:2.3:a:apache:tika:1.22
Apache » Tika » Version: 1.23

cpe:2.3:a:apache:tika:1.23
Apache » Tika » Version: 1.24

cpe:2.3:a:apache:tika:1.24
Apache » Tika » Version: 1.24.1

cpe:2.3:a:apache:tika:1.24.1
Apache » Tika » Version: 1.25

cpe:2.3:a:apache:tika:1.25
Apache » Tika » Version: 1.3

cpe:2.3:a:apache:tika:1.3
Apache » Tika » Version: 1.4

cpe:2.3:a:apache:tika:1.4
Apache » Tika » Version: 1.5

cpe:2.3:a:apache:tika:1.5
Apache » Tika » Version: 1.6

cpe:2.3:a:apache:tika:1.6
Apache » Tika » Version: 1.7

cpe:2.3:a:apache:tika:1.7
Apache » Tika » Version: 1.8

cpe:2.3:a:apache:tika:1.8
Apache » Tika » Version: 1.9

cpe:2.3:a:apache:tika:1.9
Oracle » Healthcare Foundation » Version: 7.3.0

cpe:2.3:a:oracle:healthcare_foundation:7.3.0
Oracle » Healthcare Foundation » Version: 8.0.0

cpe:2.3:a:oracle:healthcare_foundation:8.0.0
Oracle » Healthcare Foundation » Version: 8.1.0

cpe:2.3:a:oracle:healthcare_foundation:8.1.0
Oracle » Primavera Unifier » Version: 17.10

cpe:2.3:a:oracle:primavera_unifier:17.10
Oracle » Primavera Unifier » Version: 17.11

cpe:2.3:a:oracle:primavera_unifier:17.11
Oracle » Primavera Unifier » Version: 17.12

cpe:2.3:a:oracle:primavera_unifier:17.12
Oracle » Primavera Unifier » Version: 17.7

cpe:2.3:a:oracle:primavera_unifier:17.7
Oracle » Primavera Unifier » Version: 17.8

cpe:2.3:a:oracle:primavera_unifier:17.8
Oracle » Primavera Unifier » Version: 17.9

cpe:2.3:a:oracle:primavera_unifier:17.9
Oracle » Primavera Unifier » Version: 18.8

cpe:2.3:a:oracle:primavera_unifier:18.8
Oracle » Primavera Unifier » Version: 19.12

cpe:2.3:a:oracle:primavera_unifier:19.12
Oracle » Primavera Unifier » Version: 20.12

cpe:2.3:a:oracle:primavera_unifier:20.12
Oracle » Webcenter Portal » Version: 12.2.1.3.0

cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0
Oracle » Webcenter Portal » Version: 12.2.1.4.0

cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0
Oracle » Communications Messaging Server » Version: 8.1

cpe:2.3:o:oracle:communications_messaging_server:8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-28657

Products

Pricing

Contact Us