CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-37714

jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.03

EPSS Ranking 86.0%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2021-37714

Jsoup » Jsoup » Version: 0.1.1

cpe:2.3:a:jsoup:jsoup:0.1.1
Jsoup » Jsoup » Version: 0.1.2

cpe:2.3:a:jsoup:jsoup:0.1.2
Jsoup » Jsoup » Version: 0.2.1

cpe:2.3:a:jsoup:jsoup:0.2.1
Jsoup » Jsoup » Version: 0.2.1a

cpe:2.3:a:jsoup:jsoup:0.2.1a
Jsoup » Jsoup » Version: 0.2.1b

cpe:2.3:a:jsoup:jsoup:0.2.1b
Jsoup » Jsoup » Version: 0.2.2

cpe:2.3:a:jsoup:jsoup:0.2.2
Jsoup » Jsoup » Version: 0.3.1

cpe:2.3:a:jsoup:jsoup:0.3.1
Jsoup » Jsoup » Version: 1.1.1

cpe:2.3:a:jsoup:jsoup:1.1.1
Jsoup » Jsoup » Version: 1.10.1

cpe:2.3:a:jsoup:jsoup:1.10.1
Jsoup » Jsoup » Version: 1.10.2

cpe:2.3:a:jsoup:jsoup:1.10.2
Jsoup » Jsoup » Version: 1.10.3

cpe:2.3:a:jsoup:jsoup:1.10.3
Jsoup » Jsoup » Version: 1.11.1

cpe:2.3:a:jsoup:jsoup:1.11.1
Jsoup » Jsoup » Version: 1.11.2

cpe:2.3:a:jsoup:jsoup:1.11.2
Jsoup » Jsoup » Version: 1.11.3

cpe:2.3:a:jsoup:jsoup:1.11.3
Jsoup » Jsoup » Version: 1.12.1

cpe:2.3:a:jsoup:jsoup:1.12.1
Jsoup » Jsoup » Version: 1.12.2

cpe:2.3:a:jsoup:jsoup:1.12.2
Jsoup » Jsoup » Version: 1.13.1

cpe:2.3:a:jsoup:jsoup:1.13.1
Jsoup » Jsoup » Version: 1.14.1

cpe:2.3:a:jsoup:jsoup:1.14.1
Jsoup » Jsoup » Version: 1.2.1

cpe:2.3:a:jsoup:jsoup:1.2.1
Jsoup » Jsoup » Version: 1.2.2

cpe:2.3:a:jsoup:jsoup:1.2.2
Jsoup » Jsoup » Version: 1.2.3

cpe:2.3:a:jsoup:jsoup:1.2.3
Jsoup » Jsoup » Version: 1.3.1

cpe:2.3:a:jsoup:jsoup:1.3.1
Jsoup » Jsoup » Version: 1.3.2

cpe:2.3:a:jsoup:jsoup:1.3.2
Jsoup » Jsoup » Version: 1.3.3

cpe:2.3:a:jsoup:jsoup:1.3.3
Jsoup » Jsoup » Version: 1.4.1

cpe:2.3:a:jsoup:jsoup:1.4.1
Jsoup » Jsoup » Version: 1.5.1

cpe:2.3:a:jsoup:jsoup:1.5.1
Jsoup » Jsoup » Version: 1.5.2

cpe:2.3:a:jsoup:jsoup:1.5.2
Jsoup » Jsoup » Version: 1.6.0

cpe:2.3:a:jsoup:jsoup:1.6.0
Jsoup » Jsoup » Version: 1.6.1

cpe:2.3:a:jsoup:jsoup:1.6.1
Jsoup » Jsoup » Version: 1.6.2

cpe:2.3:a:jsoup:jsoup:1.6.2
Jsoup » Jsoup » Version: 1.6.3

cpe:2.3:a:jsoup:jsoup:1.6.3
Jsoup » Jsoup » Version: 1.7.1

cpe:2.3:a:jsoup:jsoup:1.7.1
Jsoup » Jsoup » Version: 1.7.2

cpe:2.3:a:jsoup:jsoup:1.7.2
Jsoup » Jsoup » Version: 1.7.3

cpe:2.3:a:jsoup:jsoup:1.7.3
Jsoup » Jsoup » Version: 1.8.1a

cpe:2.3:a:jsoup:jsoup:1.8.1a
Jsoup » Jsoup » Version: 1.8.2

cpe:2.3:a:jsoup:jsoup:1.8.2
Jsoup » Jsoup » Version: 1.8.3

cpe:2.3:a:jsoup:jsoup:1.8.3
Jsoup » Jsoup » Version: 1.8.3a

cpe:2.3:a:jsoup:jsoup:1.8.3a
Jsoup » Jsoup » Version: 1.9.1

cpe:2.3:a:jsoup:jsoup:1.9.1
Jsoup » Jsoup » Version: 1.9.1a

cpe:2.3:a:jsoup:jsoup:1.9.1a
Jsoup » Jsoup » Version: 1.9.2

cpe:2.3:a:jsoup:jsoup:1.9.2
Netapp » Management Services For Element Software And Netapp Hci » Version: N/A

cpe:2.3:a:netapp:management_services_for_element_software_and_netapp_hci:-
Oracle » Banking Trade Finance » Version: 14.5

cpe:2.3:a:oracle:banking_trade_finance:14.5
Oracle » Banking Treasury Management » Version: 14.5

cpe:2.3:a:oracle:banking_treasury_management:14.5
Oracle » Business Process Management Suite » Version: 12.2.1.3.0

cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0
Oracle » Business Process Management Suite » Version: 12.2.1.4.0

cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0
Oracle » Financial Services Crime And Compliance Management Studio » Version: 8.0.8.2.0

cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0
Oracle » Financial Services Crime And Compliance Management Studio » Version: 8.0.8.3.0

cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.3.0
Oracle » Flexcube Universal Banking » Version: 14.0.0

cpe:2.3:a:oracle:flexcube_universal_banking:14.0.0
Oracle » Flexcube Universal Banking » Version: 14.1.0

cpe:2.3:a:oracle:flexcube_universal_banking:14.1.0
Oracle » Flexcube Universal Banking » Version: 14.2.0

cpe:2.3:a:oracle:flexcube_universal_banking:14.2.0
Oracle » Flexcube Universal Banking » Version: 14.3.0

cpe:2.3:a:oracle:flexcube_universal_banking:14.3.0
Oracle » Flexcube Universal Banking » Version: 14.5

cpe:2.3:a:oracle:flexcube_universal_banking:14.5
Oracle » Hospitality Token Proxy Service » Version: 19.2

cpe:2.3:a:oracle:hospitality_token_proxy_service:19.2
Oracle » Middleware Common Libraries And Tools » Version: 12.2.1.3.0

cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.3.0
Oracle » Middleware Common Libraries And Tools » Version: 12.2.1.4.0

cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.58

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.59

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59
Oracle » Primavera Unifier » Version: 20.12

cpe:2.3:a:oracle:primavera_unifier:20.12
Oracle » Primavera Unifier » Version: 21.12

cpe:2.3:a:oracle:primavera_unifier:21.12
Oracle » Retail Customer Management And Segmentation Foundation » Version: 17.0

cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:17.0
Oracle » Retail Customer Management And Segmentation Foundation » Version: 17.0.1

cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:17.0.1
Oracle » Retail Customer Management And Segmentation Foundation » Version: 18.0

cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:18.0
Oracle » Retail Customer Management And Segmentation Foundation » Version: 18.1

cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:18.1
Oracle » Retail Customer Management And Segmentation Foundation » Version: 19.0

cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0
Oracle » Stream Analytics » Version: N/A

cpe:2.3:a:oracle:stream_analytics:-
Oracle » Stream Analytics » Version: 19c

cpe:2.3:a:oracle:stream_analytics:19c
Oracle » Webcenter Portal » Version: 12.2.1.3.0

cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0
Oracle » Webcenter Portal » Version: 12.2.1.4.0

cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0
Quarkus » Quarkus » Version: 0.0.1

cpe:2.3:a:quarkus:quarkus:0.0.1
Quarkus » Quarkus » Version: 0.1.0

cpe:2.3:a:quarkus:quarkus:0.1.0
Quarkus » Quarkus » Version: 0.10.0

cpe:2.3:a:quarkus:quarkus:0.10.0
Quarkus » Quarkus » Version: 0.11.0

cpe:2.3:a:quarkus:quarkus:0.11.0
Quarkus » Quarkus » Version: 0.12.0

cpe:2.3:a:quarkus:quarkus:0.12.0
Quarkus » Quarkus » Version: 0.13.0

cpe:2.3:a:quarkus:quarkus:0.13.0
Quarkus » Quarkus » Version: 0.13.1

cpe:2.3:a:quarkus:quarkus:0.13.1
Quarkus » Quarkus » Version: 0.13.2

cpe:2.3:a:quarkus:quarkus:0.13.2
Quarkus » Quarkus » Version: 0.13.3

cpe:2.3:a:quarkus:quarkus:0.13.3
Quarkus » Quarkus » Version: 0.14.0

cpe:2.3:a:quarkus:quarkus:0.14.0
Quarkus » Quarkus » Version: 0.15.0

cpe:2.3:a:quarkus:quarkus:0.15.0
Quarkus » Quarkus » Version: 0.16.0

cpe:2.3:a:quarkus:quarkus:0.16.0
Quarkus » Quarkus » Version: 0.16.1

cpe:2.3:a:quarkus:quarkus:0.16.1
Quarkus » Quarkus » Version: 0.17.0

cpe:2.3:a:quarkus:quarkus:0.17.0
Quarkus » Quarkus » Version: 0.18.0

cpe:2.3:a:quarkus:quarkus:0.18.0
Quarkus » Quarkus » Version: 0.19.0

cpe:2.3:a:quarkus:quarkus:0.19.0
Quarkus » Quarkus » Version: 0.19.1

cpe:2.3:a:quarkus:quarkus:0.19.1
Quarkus » Quarkus » Version: 0.2.0

cpe:2.3:a:quarkus:quarkus:0.2.0
Quarkus » Quarkus » Version: 0.20.0

cpe:2.3:a:quarkus:quarkus:0.20.0
Quarkus » Quarkus » Version: 0.21.0

cpe:2.3:a:quarkus:quarkus:0.21.0
Quarkus » Quarkus » Version: 0.21.1

cpe:2.3:a:quarkus:quarkus:0.21.1
Quarkus » Quarkus » Version: 0.21.2

cpe:2.3:a:quarkus:quarkus:0.21.2
Quarkus » Quarkus » Version: 0.22.0

cpe:2.3:a:quarkus:quarkus:0.22.0
Quarkus » Quarkus » Version: 0.23.0

cpe:2.3:a:quarkus:quarkus:0.23.0
Quarkus » Quarkus » Version: 0.23.1

cpe:2.3:a:quarkus:quarkus:0.23.1
Quarkus » Quarkus » Version: 0.23.2

cpe:2.3:a:quarkus:quarkus:0.23.2
Quarkus » Quarkus » Version: 0.24.0

cpe:2.3:a:quarkus:quarkus:0.24.0
Quarkus » Quarkus » Version: 0.25.0

cpe:2.3:a:quarkus:quarkus:0.25.0
Quarkus » Quarkus » Version: 0.26.0

cpe:2.3:a:quarkus:quarkus:0.26.0
Quarkus » Quarkus » Version: 0.26.1

cpe:2.3:a:quarkus:quarkus:0.26.1
Quarkus » Quarkus » Version: 0.27.0

cpe:2.3:a:quarkus:quarkus:0.27.0
Quarkus » Quarkus » Version: 0.28.0

cpe:2.3:a:quarkus:quarkus:0.28.0
Quarkus » Quarkus » Version: 0.28.1

cpe:2.3:a:quarkus:quarkus:0.28.1
Quarkus » Quarkus » Version: 0.3.0

cpe:2.3:a:quarkus:quarkus:0.3.0
Quarkus » Quarkus » Version: 0.4.0

cpe:2.3:a:quarkus:quarkus:0.4.0
Quarkus » Quarkus » Version: 0.5.0

cpe:2.3:a:quarkus:quarkus:0.5.0
Quarkus » Quarkus » Version: 0.6.0

cpe:2.3:a:quarkus:quarkus:0.6.0
Quarkus » Quarkus » Version: 0.7.0

cpe:2.3:a:quarkus:quarkus:0.7.0
Quarkus » Quarkus » Version: 0.8.0

cpe:2.3:a:quarkus:quarkus:0.8.0
Quarkus » Quarkus » Version: 0.9.0

cpe:2.3:a:quarkus:quarkus:0.9.0
Quarkus » Quarkus » Version: 0.9.1

cpe:2.3:a:quarkus:quarkus:0.9.1
Quarkus » Quarkus » Version: 1.0.0

cpe:2.3:a:quarkus:quarkus:1.0.0
Quarkus » Quarkus » Version: 1.0.1

cpe:2.3:a:quarkus:quarkus:1.0.1
Quarkus » Quarkus » Version: 1.1.0

cpe:2.3:a:quarkus:quarkus:1.1.0
Quarkus » Quarkus » Version: 1.1.1

cpe:2.3:a:quarkus:quarkus:1.1.1
Quarkus » Quarkus » Version: 1.10.0

cpe:2.3:a:quarkus:quarkus:1.10.0
Quarkus » Quarkus » Version: 1.10.1

cpe:2.3:a:quarkus:quarkus:1.10.1
Quarkus » Quarkus » Version: 1.10.2

cpe:2.3:a:quarkus:quarkus:1.10.2
Quarkus » Quarkus » Version: 1.10.3

cpe:2.3:a:quarkus:quarkus:1.10.3
Quarkus » Quarkus » Version: 1.10.4

cpe:2.3:a:quarkus:quarkus:1.10.4
Quarkus » Quarkus » Version: 1.10.5

cpe:2.3:a:quarkus:quarkus:1.10.5
Quarkus » Quarkus » Version: 1.11.0

cpe:2.3:a:quarkus:quarkus:1.11.0
Quarkus » Quarkus » Version: 1.11.1

cpe:2.3:a:quarkus:quarkus:1.11.1
Quarkus » Quarkus » Version: 1.11.2

cpe:2.3:a:quarkus:quarkus:1.11.2
Quarkus » Quarkus » Version: 1.11.3

cpe:2.3:a:quarkus:quarkus:1.11.3
Quarkus » Quarkus » Version: 1.11.4

cpe:2.3:a:quarkus:quarkus:1.11.4
Quarkus » Quarkus » Version: 1.11.5

cpe:2.3:a:quarkus:quarkus:1.11.5
Quarkus » Quarkus » Version: 1.11.6

cpe:2.3:a:quarkus:quarkus:1.11.6
Quarkus » Quarkus » Version: 1.11.7

cpe:2.3:a:quarkus:quarkus:1.11.7
Quarkus » Quarkus » Version: 1.12.0

cpe:2.3:a:quarkus:quarkus:1.12.0
Quarkus » Quarkus » Version: 1.12.1

cpe:2.3:a:quarkus:quarkus:1.12.1
Quarkus » Quarkus » Version: 1.12.2

cpe:2.3:a:quarkus:quarkus:1.12.2
Quarkus » Quarkus » Version: 1.13.0

cpe:2.3:a:quarkus:quarkus:1.13.0
Quarkus » Quarkus » Version: 1.13.1

cpe:2.3:a:quarkus:quarkus:1.13.1
Quarkus » Quarkus » Version: 1.13.2

cpe:2.3:a:quarkus:quarkus:1.13.2
Quarkus » Quarkus » Version: 1.13.3

cpe:2.3:a:quarkus:quarkus:1.13.3
Quarkus » Quarkus » Version: 1.13.4

cpe:2.3:a:quarkus:quarkus:1.13.4
Quarkus » Quarkus » Version: 1.13.5

cpe:2.3:a:quarkus:quarkus:1.13.5
Quarkus » Quarkus » Version: 1.13.6

cpe:2.3:a:quarkus:quarkus:1.13.6
Quarkus » Quarkus » Version: 1.13.7

cpe:2.3:a:quarkus:quarkus:1.13.7
Quarkus » Quarkus » Version: 1.2.0

cpe:2.3:a:quarkus:quarkus:1.2.0
Quarkus » Quarkus » Version: 1.2.1

cpe:2.3:a:quarkus:quarkus:1.2.1
Quarkus » Quarkus » Version: 1.3.0

cpe:2.3:a:quarkus:quarkus:1.3.0
Quarkus » Quarkus » Version: 1.3.1

cpe:2.3:a:quarkus:quarkus:1.3.1
Quarkus » Quarkus » Version: 1.3.2

cpe:2.3:a:quarkus:quarkus:1.3.2
Quarkus » Quarkus » Version: 1.3.3

cpe:2.3:a:quarkus:quarkus:1.3.3
Quarkus » Quarkus » Version: 1.3.4

cpe:2.3:a:quarkus:quarkus:1.3.4
Quarkus » Quarkus » Version: 1.4.0

cpe:2.3:a:quarkus:quarkus:1.4.0
Quarkus » Quarkus » Version: 1.4.1

cpe:2.3:a:quarkus:quarkus:1.4.1
Quarkus » Quarkus » Version: 1.4.2

cpe:2.3:a:quarkus:quarkus:1.4.2
Quarkus » Quarkus » Version: 1.5.0

cpe:2.3:a:quarkus:quarkus:1.5.0
Quarkus » Quarkus » Version: 1.5.1

cpe:2.3:a:quarkus:quarkus:1.5.1
Quarkus » Quarkus » Version: 1.5.2

cpe:2.3:a:quarkus:quarkus:1.5.2
Quarkus » Quarkus » Version: 1.6.0

cpe:2.3:a:quarkus:quarkus:1.6.0
Quarkus » Quarkus » Version: 1.6.1

cpe:2.3:a:quarkus:quarkus:1.6.1
Quarkus » Quarkus » Version: 1.7.0

cpe:2.3:a:quarkus:quarkus:1.7.0
Quarkus » Quarkus » Version: 1.7.1

cpe:2.3:a:quarkus:quarkus:1.7.1
Quarkus » Quarkus » Version: 1.7.2

cpe:2.3:a:quarkus:quarkus:1.7.2
Quarkus » Quarkus » Version: 1.7.3

cpe:2.3:a:quarkus:quarkus:1.7.3
Quarkus » Quarkus » Version: 1.7.4

cpe:2.3:a:quarkus:quarkus:1.7.4
Quarkus » Quarkus » Version: 1.7.5

cpe:2.3:a:quarkus:quarkus:1.7.5
Quarkus » Quarkus » Version: 1.7.6

cpe:2.3:a:quarkus:quarkus:1.7.6
Quarkus » Quarkus » Version: 1.8.0

cpe:2.3:a:quarkus:quarkus:1.8.0
Quarkus » Quarkus » Version: 1.8.1

cpe:2.3:a:quarkus:quarkus:1.8.1
Quarkus » Quarkus » Version: 1.8.2

cpe:2.3:a:quarkus:quarkus:1.8.2
Quarkus » Quarkus » Version: 1.8.3

cpe:2.3:a:quarkus:quarkus:1.8.3
Quarkus » Quarkus » Version: 1.9.0

cpe:2.3:a:quarkus:quarkus:1.9.0
Quarkus » Quarkus » Version: 1.9.1

cpe:2.3:a:quarkus:quarkus:1.9.1
Quarkus » Quarkus » Version: 1.9.2

cpe:2.3:a:quarkus:quarkus:1.9.2
Quarkus » Quarkus » Version: 2.0.0

cpe:2.3:a:quarkus:quarkus:2.0.0
Quarkus » Quarkus » Version: 2.0.1

cpe:2.3:a:quarkus:quarkus:2.0.1
Quarkus » Quarkus » Version: 2.0.2

cpe:2.3:a:quarkus:quarkus:2.0.2
Quarkus » Quarkus » Version: 2.0.3

cpe:2.3:a:quarkus:quarkus:2.0.3
Quarkus » Quarkus » Version: 2.1.0

cpe:2.3:a:quarkus:quarkus:2.1.0
Quarkus » Quarkus » Version: 2.1.1

cpe:2.3:a:quarkus:quarkus:2.1.1
Quarkus » Quarkus » Version: 2.1.2

cpe:2.3:a:quarkus:quarkus:2.1.2
Quarkus » Quarkus » Version: 2.1.3

cpe:2.3:a:quarkus:quarkus:2.1.3
Quarkus » Quarkus » Version: 2.1.4

cpe:2.3:a:quarkus:quarkus:2.1.4
Quarkus » Quarkus » Version: 2.2.0

cpe:2.3:a:quarkus:quarkus:2.2.0
Quarkus » Quarkus » Version: 2.2.1

cpe:2.3:a:quarkus:quarkus:2.2.1
Quarkus » Quarkus » Version: 2.2.2

cpe:2.3:a:quarkus:quarkus:2.2.2
Quarkus » Quarkus » Version: 2.2.3

cpe:2.3:a:quarkus:quarkus:2.2.3
Oracle » Communications Messaging Server » Version: 8.1

cpe:2.3:o:oracle:communications_messaging_server:8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-37714

Products

Pricing

Contact Us