Oracle Primavera Unifier (Jan 2022 CPU)

The version of Primavera Unifier installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2022 CPU advisory. - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Platform, Data Persistence OWASP Java HTML...

CVE-2021-42575

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

com.github.spacialcircumstances.gradle-cucumber-reporting:com.github.spacialcircumstances.gradle-cucumber-reporting.gradle.plugin (>=0.0.1, <=0.0.11), com.googlecode.owasp-java-html-sanitizer:html-types (20170515.1) +14 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20170515.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20170515.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

org.internetitem:framework (>=1.9, <=2.1), org.internetitem:logback-elasticsearch-appender (>=1.8, <=2.1) potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (r136)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version r136 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: - org.internetitem:framework...

com.accenture.atom:library-reporting-allure (0.0.1), com.accenture.atom:library-reporting-extent (0.0.1) +19 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20190610.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20190610.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.codingame.gameengine:runner (>=3.15.3, <=4.1.2), com.github.fmarmar:cucumber-tools (>=0.2.0-alpha, <=0.4.1) +28 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20171016.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20171016.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.extole:client-rest (>=1.0.2, <=1.0.3), com.github.dalet-oss:parameter-validation-filter (>=1.3.0, <=1.4.3) +11 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (r239)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version r239 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: - com.extole:client-rest =1.0....

com.googlecode.owasp-java-html-sanitizer:html-types (20170512.1) potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20170512.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20170512.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.breuninger.boot:core (>=3.0.0.release, <=3.2.1.release), com.breuninger.boot:example-app (>=3.0.3.release, <=3.2.1.release) +3 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20190503.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20190503.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: - com.breuninger.boot:co...

com.googlecode.owasp-java-html-sanitizer:html-types (20160422.1) potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20160422.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20160422.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.googlecode.owasp-java-html-sanitizer:html-types (20170329.1) potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20170329.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20170329.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.googlecode.owasp-java-html-sanitizer:html-types (20170411.1) potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20170411.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20170411.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.github.adminfaces:quarkus-omnifaces (>=1.1.0, <=1.4.0), com.github.adminfaces:quarkus-omnifaces-deployment (>=1.1.0, <=1.4.0) +18 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20181114.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20181114.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.github.spacialcircumstances.gradle-cucumber-reporting:com.github.spacialcircumstances.gradle-cucumber-reporting.gradle.plugin (>=0.1.5, <=0.1.7), com.github.spacialcircumstances:gradle-cucumber-reporting (>=0.1.5, <=0.1.7) +39 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20190325.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20190325.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.googlecode.owasp-java-html-sanitizer:html-types (20160628.1), com.minghusoft:jf-spring-boot-autoconfigure (0.0.1) +7 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20160628.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20160628.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

br.com.jarch:jarch-apt (>=20.7.0, <=25.12.0), br.com.jarch:jarch-bpm (>=24.2.0, <=25.12.0) +383 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (>=r136, <=20200713.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version =r136, =20.7.0, =24.2.0, =20.7.0, =23.1.0, =24.2.0, =3.0.0.release, =3.0.3.release, =1.0.1, =4.12.1.1, =2.2.1, =7.2.0.1, =1.2.0, =1.2.4 and more Source cves: CVE-2021-42575 Source advisory: MEND:CVE-2021-42575...

CVE-2021-42575

The IBM Jazz Reporting Service is affected by CVE-2021-42575 (OWASP Java HTML Sanitizer before 20211018.1 fails to properly enforce policies for SELECT, STYLE, and OPTION). Affected versions: 7.1, 7.0.3, 7.0.2. Remediation via IBM: apply the relevant iFix from Fix Central (7.1: iFix005; 7.0.3: iF...