CVEDB API

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 70.0%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2021-42575

Oracle » Middleware Common Libraries And Tools » Version: 12.2.1.3.0

cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.3.0
Oracle » Middleware Common Libraries And Tools » Version: 12.2.1.4.0

cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0
Oracle » Primavera Unifier » Version: 17.10

cpe:2.3:a:oracle:primavera_unifier:17.10
Oracle » Primavera Unifier » Version: 17.11

cpe:2.3:a:oracle:primavera_unifier:17.11
Oracle » Primavera Unifier » Version: 17.12

cpe:2.3:a:oracle:primavera_unifier:17.12
Oracle » Primavera Unifier » Version: 17.7

cpe:2.3:a:oracle:primavera_unifier:17.7
Oracle » Primavera Unifier » Version: 17.8

cpe:2.3:a:oracle:primavera_unifier:17.8
Oracle » Primavera Unifier » Version: 17.9

cpe:2.3:a:oracle:primavera_unifier:17.9
Oracle » Primavera Unifier » Version: 18.8

cpe:2.3:a:oracle:primavera_unifier:18.8
Oracle » Primavera Unifier » Version: 19.12

cpe:2.3:a:oracle:primavera_unifier:19.12
Oracle » Primavera Unifier » Version: 20.12

cpe:2.3:a:oracle:primavera_unifier:20.12
Oracle » Primavera Unifier » Version: 21.12

cpe:2.3:a:oracle:primavera_unifier:21.12
Owasp » Java Html Sanitizer » Version: N/A

cpe:2.3:a:owasp:java_html_sanitizer:-
Owasp » Java Html Sanitizer » Version: 20200713.1

cpe:2.3:a:owasp:java_html_sanitizer:20200713.1