# Vulnerabilities published in 2021


- [CVE-2021-2354](https://insights.sbomify.com/CVE-2021-2354/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-2353](https://insights.sbomify.com/CVE-2021-2353/): Other in Siebel Core - Server Framework (medium 4.4)
- [CVE-2021-23521](https://insights.sbomify.com/CVE-2021-23521/): Link Following (medium 5.5)
- [CVE-2021-23520](https://insights.sbomify.com/CVE-2021-23520/): Arbitrary File Write via Archive Extraction (Zip Slip) (medium 5.5)
- [CVE-2021-2352](https://insights.sbomify.com/CVE-2021-2352/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-23518](https://insights.sbomify.com/CVE-2021-23518/): Prototype Pollution (high 7.3)
- [CVE-2021-23514](https://insights.sbomify.com/CVE-2021-23514/): Path Traversal (medium 6.5)
- [CVE-2021-2351](https://insights.sbomify.com/CVE-2021-2351/): Weak cryptography in WebLogic Server (high 8.3)
- [CVE-2021-23509](https://insights.sbomify.com/CVE-2021-23509/): Prototype Pollution (medium 5.6)
- [CVE-2021-23507](https://insights.sbomify.com/CVE-2021-23507/): Prototype Pollution (high 7.5)
- [CVE-2021-2350](https://insights.sbomify.com/CVE-2021-2350/): Information disclosure in Hyperion Essbase Administration Services (high 7.5)
- [CVE-2021-23497](https://insights.sbomify.com/CVE-2021-23497/): Prototype Pollution (high 7.5)
- [CVE-2021-23495](https://insights.sbomify.com/CVE-2021-23495/): Open Redirect (medium 5.4)
- [CVE-2021-23490](https://insights.sbomify.com/CVE-2021-23490/): Regular Expression Denial of Service (ReDoS) (high 7.5)
- [CVE-2021-2349](https://insights.sbomify.com/CVE-2021-2349/): Other in Hyperion Essbase Administration Services (high 8.6)
- [CVE-2021-23484](https://insights.sbomify.com/CVE-2021-23484/): Arbitrary File Write via Archive Extraction (Zip Slip) (critical 9.8)
- [CVE-2021-2348](https://insights.sbomify.com/CVE-2021-2348/): Information disclosure in Commerce Guided Search / Oracle Commerce Experience Manager (medium 4.3)
- [CVE-2021-23472](https://insights.sbomify.com/CVE-2021-23472/): Cross-site Scripting (XSS) (low 3.1)
- [CVE-2021-23470](https://insights.sbomify.com/CVE-2021-23470/): Prototype Pollution (high 8.2)
- [CVE-2021-2347](https://insights.sbomify.com/CVE-2021-2347/): Other in Hyperion Infrastructure Technology (medium 5.2)
- [CVE-2021-23463](https://insights.sbomify.com/CVE-2021-23463/): XML External Entity (XXE) Injection (high 8.1)
- [CVE-2021-23460](https://insights.sbomify.com/CVE-2021-23460/): Prototype Pollution (high 7.5)
- [CVE-2021-2346](https://insights.sbomify.com/CVE-2021-2346/): Other in Commerce Guided Search / Oracle Commerce Experience Manager (medium 5.4)
- [CVE-2021-23452](https://insights.sbomify.com/CVE-2021-23452/): Prototype Pollution (high 8.6)
- [CVE-2021-23451](https://insights.sbomify.com/CVE-2021-23451/): Insecure Randomness (medium 6.5)
- [CVE-2021-23450](https://insights.sbomify.com/CVE-2021-23450/): Prototype Pollution (high 7.5)
- [CVE-2021-2345](https://insights.sbomify.com/CVE-2021-2345/): Other in Commerce Guided Search / Oracle Commerce Experience Manager (medium 5.4)
- [CVE-2021-23449](https://insights.sbomify.com/CVE-2021-23449/): Sandbox Bypass (critical 9.8)
- [CVE-2021-23448](https://insights.sbomify.com/CVE-2021-23448/): Prototype Pollution (medium 6.5)
- [CVE-2021-23447](https://insights.sbomify.com/CVE-2021-23447/): Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2021-23446](https://insights.sbomify.com/CVE-2021-23446/): Regular Expression Denial of Service (ReDoS) (high 7.5)
- [CVE-2021-23445](https://insights.sbomify.com/CVE-2021-23445/): Cross-site Scripting (XSS) (low 3.1)
- [CVE-2021-23444](https://insights.sbomify.com/CVE-2021-23444/): Prototype Pollution (medium 5.6)
- [CVE-2021-23443](https://insights.sbomify.com/CVE-2021-23443/): Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2021-23442](https://insights.sbomify.com/CVE-2021-23442/): Prototype Pollution (high 8.6)
- [CVE-2021-23440](https://insights.sbomify.com/CVE-2021-23440/): Prototype Pollution (high 7.3)
- [CVE-2021-2344](https://insights.sbomify.com/CVE-2021-2344/): Denial of service in Coherence (high 7.5)
- [CVE-2021-23439](https://insights.sbomify.com/CVE-2021-23439/): Cross-site Scripting (XSS) (medium 4.2)
- [CVE-2021-23438](https://insights.sbomify.com/CVE-2021-23438/): Prototype Pollution (medium 5.6)
- [CVE-2021-23437](https://insights.sbomify.com/CVE-2021-23437/): Regular Expression Denial of Service (ReDoS) (high 7.5)
- [CVE-2021-23436](https://insights.sbomify.com/CVE-2021-23436/): Prototype Pollution (medium 5.6)
- [CVE-2021-23435](https://insights.sbomify.com/CVE-2021-23435/): Open Redirect (high 7.6)
- [CVE-2021-23434](https://insights.sbomify.com/CVE-2021-23434/): Prototype Pollution (medium 5.6)
- [CVE-2021-23433](https://insights.sbomify.com/CVE-2021-23433/): Prototype Pollution (medium 5.9)
- [CVE-2021-23432](https://insights.sbomify.com/CVE-2021-23432/): Prototype Pollution (medium 5.4)
- [CVE-2021-23431](https://insights.sbomify.com/CVE-2021-23431/): Cross-site Request Forgery (CSRF) (medium 5.4)
- [CVE-2021-23430](https://insights.sbomify.com/CVE-2021-23430/): Directory Traversal (high 7.5)
- [CVE-2021-2343](https://insights.sbomify.com/CVE-2021-2343/): Information disclosure in Workflow (medium 4.3)
- [CVE-2021-23429](https://insights.sbomify.com/CVE-2021-23429/): Denial of Service (DoS) (medium 6.5)
- [CVE-2021-23428](https://insights.sbomify.com/CVE-2021-23428/): Directory Traversal (high 8.6)
- [CVE-2021-23427](https://insights.sbomify.com/CVE-2021-23427/): Arbitrary File Write via Archive Extraction (Zip Slip) (high 8.6)
- [CVE-2021-23426](https://insights.sbomify.com/CVE-2021-23426/): Prototype Pollution (medium 5.6)
- [CVE-2021-23425](https://insights.sbomify.com/CVE-2021-23425/): Regular Expression Denial of Service (ReDoS) (medium 5.3)
- [CVE-2021-23424](https://insights.sbomify.com/CVE-2021-23424/): Regular Expression Denial of Service (ReDoS) (high 7.5)
- [CVE-2021-23423](https://insights.sbomify.com/CVE-2021-23423/): Directory Traversal (medium 5.5)
- [CVE-2021-23422](https://insights.sbomify.com/CVE-2021-23422/): Arbitrary Code Injection (high 7.8)
- [CVE-2021-23421](https://insights.sbomify.com/CVE-2021-23421/): Prototype Pollution (medium 5.6)
- [CVE-2021-23420](https://insights.sbomify.com/CVE-2021-23420/): Deserialization of Untrusted Data (high 7.7)
- [CVE-2021-2342](https://insights.sbomify.com/CVE-2021-2342/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-23419](https://insights.sbomify.com/CVE-2021-23419/): Prototype Pollution (high 7.3)
- [CVE-2021-23418](https://insights.sbomify.com/CVE-2021-23418/): XML External Entity (XXE) Injection (medium 6.3)
- [CVE-2021-23417](https://insights.sbomify.com/CVE-2021-23417/): Prototype Pollution (medium 5.6)
- [CVE-2021-23416](https://insights.sbomify.com/CVE-2021-23416/): Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2021-23415](https://insights.sbomify.com/CVE-2021-23415/): Directory Traversal (high 7.5)
- [CVE-2021-23414](https://insights.sbomify.com/CVE-2021-23414/): Cross-site Scripting (XSS) (medium 6.5)
- [CVE-2021-23413](https://insights.sbomify.com/CVE-2021-23413/): Denial of Service (DoS) (medium 5.3)
- [CVE-2021-23412](https://insights.sbomify.com/CVE-2021-23412/): Command Injection (high 8.1)
- [CVE-2021-23411](https://insights.sbomify.com/CVE-2021-23411/): Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2021-2341](https://insights.sbomify.com/CVE-2021-2341/): Information disclosure in Java SE JDK and JRE (low 3.1)
- [CVE-2021-23409](https://insights.sbomify.com/CVE-2021-23409/): Denial of Service (DoS) (high 7.5)
- [CVE-2021-23408](https://insights.sbomify.com/CVE-2021-23408/): Prototype Pollution (medium 5.4)
- [CVE-2021-23407](https://insights.sbomify.com/CVE-2021-23407/): Directory Traversal (high 7.5)
- [CVE-2021-23406](https://insights.sbomify.com/CVE-2021-23406/): Remote Code Execution (RCE) (high 8.1)
- [CVE-2021-23405](https://insights.sbomify.com/CVE-2021-23405/): SQL Injection (high 8.3)
- [CVE-2021-23404](https://insights.sbomify.com/CVE-2021-23404/): Cross-site Request Forgery (CSRF) (high 7.6)
- [CVE-2021-23403](https://insights.sbomify.com/CVE-2021-23403/): Prototype Pollution (high 7.3)
- [CVE-2021-23402](https://insights.sbomify.com/CVE-2021-23402/): Prototype Pollution (high 7.3)
- [CVE-2021-23401](https://insights.sbomify.com/CVE-2021-23401/): Open Redirect (medium 5.4)
- [CVE-2021-23400](https://insights.sbomify.com/CVE-2021-23400/): HTTP Header Injection (medium 6.3)
- [CVE-2021-2340](https://insights.sbomify.com/CVE-2021-2340/): Denial of service in MySQL Server (low 2.7)
- [CVE-2021-23399](https://insights.sbomify.com/CVE-2021-23399/): Arbitrary Command Injection (high 7.3)
- [CVE-2021-23398](https://insights.sbomify.com/CVE-2021-23398/): Cross-site Scripting (XSS) (medium 6.1)
- [CVE-2021-23397](https://insights.sbomify.com/CVE-2021-23397/): Prototype Pollution (medium 5.6)
- [CVE-2021-23396](https://insights.sbomify.com/CVE-2021-23396/): Prototype Pollution (medium 5.6)
- [CVE-2021-23395](https://insights.sbomify.com/CVE-2021-23395/): Prototype Pollution (high 7.3)
- [CVE-2021-23394](https://insights.sbomify.com/CVE-2021-23394/): Remote Code Execution (RCE) (high 8.1)
- [CVE-2021-23393](https://insights.sbomify.com/CVE-2021-23393/): Open Redirect (medium 5.4)
- [CVE-2021-23392](https://insights.sbomify.com/CVE-2021-23392/): Regular Expression Denial of Service (ReDoS) (medium 5.3)
- [CVE-2021-23391](https://insights.sbomify.com/CVE-2021-23391/): Arbitrary File Write via Archive Extraction (Zip Slip) (high 7.3)
- [CVE-2021-23390](https://insights.sbomify.com/CVE-2021-23390/): Arbitrary Code Execution (critical 9.8)
- [CVE-2021-2339](https://insights.sbomify.com/CVE-2021-2339/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-23389](https://insights.sbomify.com/CVE-2021-23389/): Arbitrary Code Execution (critical 9.8)
- [CVE-2021-23388](https://insights.sbomify.com/CVE-2021-23388/): Regular Expression Denial of Service (ReDoS) (medium 5.3)
- [CVE-2021-23387](https://insights.sbomify.com/CVE-2021-23387/): Open Redirect (medium 5.4)
- [CVE-2021-23386](https://insights.sbomify.com/CVE-2021-23386/): Remote Memory Exposure (high 7.7)
- [CVE-2021-23385](https://insights.sbomify.com/CVE-2021-23385/): Open Redirect (medium 5.4)
- [CVE-2021-23384](https://insights.sbomify.com/CVE-2021-23384/): Open Redirect (medium 5.4)
- [CVE-2021-23383](https://insights.sbomify.com/CVE-2021-23383/): Prototype Pollution (medium 5.6)
- [CVE-2021-23382](https://insights.sbomify.com/CVE-2021-23382/): Regular Expression Denial of Service (ReDoS) (medium 5.3)
- [CVE-2021-23381](https://insights.sbomify.com/CVE-2021-23381/): Arbitrary Command Injection (high 7.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/220/