6.5
MEDIUM
CVE-2020-5421
Apache Spring Security Path Parameter Jsessionid RFD Bypass
Description

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.

INFO

Published Date :

Sept. 19, 2020, 4:15 a.m.

Last Modified :

Nov. 7, 2023, 3:23 a.m.

Source :

[email protected]

Remotely Exploitable :

Yes !

Impact Score :

4.7

Exploitability Score :

1.3
Public PoC/Exploit Available at Github

CVE-2020-5421 has a 12 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2020-5421 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Oracle weblogic_server
2 Oracle commerce_guided_search
3 Oracle retail_customer_management_and_segmentation_foundation
4 Oracle goldengate_application_adapters
5 Oracle retail_predictive_application_server
6 Oracle mysql_enterprise_monitor
7 Oracle retail_bulk_data_integration
8 Oracle retail_xstore_point_of_service
9 Oracle primavera_p6_enterprise_project_portfolio_management
10 Oracle flexcube_private_banking
11 Oracle retail_merchandising_system
12 Oracle communications_unified_inventory_management
13 Oracle communications_session_report_manager
14 Oracle insurance_policy_administration
15 Oracle insurance_rules_palette
16 Oracle primavera_gateway
17 Oracle retail_service_backbone
18 Oracle retail_order_broker
19 Oracle fusion_middleware
20 Oracle communications_design_studio
21 Oracle financial_services_analytical_applications_infrastructure
22 Oracle enterprise_data_quality
23 Oracle retail_integration_bus
24 Oracle hyperion_infrastructure_technology
25 Oracle retail_assortment_planning
26 Oracle retail_financial_integration
27 Oracle retail_invoice_matching
28 Oracle retail_returns_management
29 Oracle endeca_information_discovery_integrator
30 Oracle healthcare_master_person_index
31 Oracle storagetek_tape_analytics_sw_tool
32 Oracle storagetek_acsls
33 Oracle communications_brm
34 Oracle retail_customer_engagement
1 Netapp oncommand_insight
2 Netapp snapcenter
3 Netapp snap_creator_framework
1 Vmware spring_framework
: Total Affected Vendor : 3 | Products : 38
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2020-5421.

URL Resource
https://lists.apache.org/thread.html/r1c679c43fa4f7846d748a937955c7921436d1b315445978254442163%40%3Ccommits.ambari.apache.org%3E
https://lists.apache.org/thread.html/r1eccdbd7986618a7319ee7a533bd9d9bf6e8678e59dd4cca9b5b2d7a%40%3Cissues.ambari.apache.org%3E
https://lists.apache.org/thread.html/r3589ed0d18edeb79028615080d5a0e8878856436bb91774a3196d9eb%40%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r503e64b43a57fd68229cac4a869d1a9a2eac9e75f8719cad3a840211%40%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r5c95eff679dfc642e9e4ab5ac6d202248a59cb1e9457cfbe8b729ac5%40%3Cissues.ambari.apache.org%3E
https://lists.apache.org/thread.html/r7e6a213eea7f04fc6d9e3bd6eb8d68c4df92a22e956e95cb2c482865%40%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r8b496b1743d128e6861ee0ed3c3c48cc56c505b38f84fa5baf7ae33a%40%3Cdev.ambari.apache.org%3E
https://lists.apache.org/thread.html/r918caad55dcc640a16753b00d8d6acb90b4e36de4b6156d0867246ec%40%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r9f13cccb214495e14648d2c9b8f2c6072fd5219e74502dd35ede81e1%40%3Cdev.ambari.apache.org%3E
https://lists.apache.org/thread.html/ra889d95141059c6cbe77dd80249bb488ae53b274b5f3abad09d9511d%40%3Cuser.ignite.apache.org%3E
https://lists.apache.org/thread.html/raf7ca57033e537e4f9d7df7f192fa6968c1e49409b2348e08d807ccb%40%3Cuser.ignite.apache.org%3E
https://lists.apache.org/thread.html/rb18ed999153ef0f0cb7af03efe0046c42c7242fd77fbd884a75ecfdc%40%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rc9efaf6db98bee19db1bc911d0fa442287dac5cb229d4aaa08b6a13d%40%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/rd462a8b0dfab4c15e67c0672cd3c211ecd0e4f018f824082ed54f665%40%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/re014a49d77f038ba70e5e9934d400af6653e8c9ac110d32b1254127e%40%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/rf00d8f4101a1c1ea4de6ea1e09ddf7472cfd306745c90d6da87ae074%40%3Cdev.hive.apache.org%3E
https://security.netapp.com/advisory/ntap-20210513-0009/ Third Party Advisory
https://tanzu.vmware.com/security/cve-2020-5421 Vendor Advisory
https://www.oracle.com//security-alerts/cpujul2021.html Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html Not Applicable Third Party Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Profile Photo
haba713/depcheck-gretty-issue

None

Java

Updated: 2 months, 1 week ago
0 stars 0 fork 0 watcher
Born at : Sept. 5, 2024, 7:56 a.m. This repo has been linked 26 different CVEs too.
Profile Photo
Dzmitry-Basiachenka/dist-foreign-aliakh

None

SCSS Mustache

Updated: 8 months ago
0 stars 0 fork 0 watcher
Born at : March 11, 2024, 8:53 a.m. This repo has been linked 52 different CVEs too.
Profile Photo
scordero1234/java_sec_demo-main

None

Java HTML CSS JavaScript

Updated: 1 year, 4 months ago
0 stars 0 fork 0 watcher
Born at : July 6, 2023, 12:59 a.m. This repo has been linked 39 different CVEs too.
Profile Photo
emilywang0/CVE_testing_VULN

None

Java

Updated: 6 months ago
0 stars 0 fork 0 watcher
Born at : June 11, 2023, 5:01 a.m. This repo has been linked 9 different CVEs too.
Profile Photo
Ljw1114/SpringFramework-Vul

一些spring框架相关的漏洞

Updated: 9 months, 4 weeks ago
1 stars 0 fork 0 watcher
Born at : July 17, 2022, 1:56 a.m. This repo has been linked 8 different CVEs too.
Profile Photo
ax1sX/SpringSecurity

A list for Spring Security

Java CSS HTML Dockerfile JavaScript Python

Updated: 2 months, 3 weeks ago
117 stars 15 fork 15 watcher
Born at : July 6, 2022, 11:52 a.m. This repo has been linked 26 different CVEs too.
Profile Photo
soosmile/POC

None

Updated: 4 months, 2 weeks ago
8 stars 1 fork 1 watcher
Born at : June 21, 2022, 7:45 a.m. This repo has been linked 943 different CVEs too.
Profile Photo
nBp1Ng/FrameworkAndComponentVulnerabilities

Java框架及组件漏洞POC , 以及部分经验证的官方推荐的缓解措施，便于不升级组件情况下阻止漏洞。 缓解措施仅用于缓解漏洞影响，可能对系统存在未知影响；建议先评估再使用，并在配置后跑全流程回归，避免因更改配置对系统造成影响。

Updated: 1 year, 8 months ago
2 stars 1 fork 1 watcher
Born at : April 25, 2022, 9:19 a.m. This repo has been linked 8 different CVEs too.
Profile Photo
developer3000S/PoC-in-GitHub

None

Updated: 8 months, 1 week ago
33 stars 3 fork 3 watcher
Born at : March 12, 2021, 12:22 p.m. This repo has been linked 1063 different CVEs too.
Profile Photo
pandaMingx/CVE-2020-5421

Spring 安全漏洞 CVE-2020-5421复现

Java

Updated: 1 year, 5 months ago
3 stars 0 fork 0 watcher
Born at : Jan. 10, 2021, 12:26 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
delaval-htps/ProjetDevJava

Projet de fin de formation: application type CRM

java spring maven mysql-database jsp

CSS JavaScript Java HTML TypeScript

Updated: 1 year, 8 months ago
0 stars 0 fork 0 watcher
Born at : Sept. 21, 2020, 10:08 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
x-f1v3/Vulnerability_Environment

Vulnerability Environment For Webapp

Java Smarty FreeMarker HTML Groovy Ruby XSLT JavaScript CSS Shell

Updated: 3 years, 8 months ago
1 stars 2 fork 2 watcher
Born at : Jan. 9, 2019, 9:39 a.m. This repo has been linked 5 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2020-5421 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2020-5421 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • CVE Modified by [email protected]

    Nov. 07, 2023

    Action Type Old Value New Value
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/re014a49d77f038ba70e5e9934d400af6653e8c9ac110d32b1254127e%40%3Cdev.ranger.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r1eccdbd7986618a7319ee7a533bd9d9bf6e8678e59dd4cca9b5b2d7a%40%3Cissues.ambari.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r9f13cccb214495e14648d2c9b8f2c6072fd5219e74502dd35ede81e1%40%3Cdev.ambari.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r8b496b1743d128e6861ee0ed3c3c48cc56c505b38f84fa5baf7ae33a%40%3Cdev.ambari.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r1c679c43fa4f7846d748a937955c7921436d1b315445978254442163%40%3Ccommits.ambari.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r5c95eff679dfc642e9e4ab5ac6d202248a59cb1e9457cfbe8b729ac5%40%3Cissues.ambari.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/rf00d8f4101a1c1ea4de6ea1e09ddf7472cfd306745c90d6da87ae074%40%3Cdev.hive.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/rc9efaf6db98bee19db1bc911d0fa442287dac5cb229d4aaa08b6a13d%40%3Cissues.hive.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r7e6a213eea7f04fc6d9e3bd6eb8d68c4df92a22e956e95cb2c482865%40%3Cissues.hive.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r503e64b43a57fd68229cac4a869d1a9a2eac9e75f8719cad3a840211%40%3Ccommits.pulsar.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r918caad55dcc640a16753b00d8d6acb90b4e36de4b6156d0867246ec%40%3Ccommits.pulsar.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r3589ed0d18edeb79028615080d5a0e8878856436bb91774a3196d9eb%40%3Ccommits.pulsar.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/rb18ed999153ef0f0cb7af03efe0046c42c7242fd77fbd884a75ecfdc%40%3Ccommits.pulsar.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/raf7ca57033e537e4f9d7df7f192fa6968c1e49409b2348e08d807ccb%40%3Cuser.ignite.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/ra889d95141059c6cbe77dd80249bb488ae53b274b5f3abad09d9511d%40%3Cuser.ignite.apache.org%3E [No types assigned]
    Added Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/rd462a8b0dfab4c15e67c0672cd3c211ecd0e4f018f824082ed54f665%40%3Cissues.hive.apache.org%3E [No types assigned]
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/re014a49d77f038ba70e5e9934d400af6653e8c9ac110d32b1254127e@%3Cdev.ranger.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r1eccdbd7986618a7319ee7a533bd9d9bf6e8678e59dd4cca9b5b2d7a@%3Cissues.ambari.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r9f13cccb214495e14648d2c9b8f2c6072fd5219e74502dd35ede81e1@%3Cdev.ambari.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r1c679c43fa4f7846d748a937955c7921436d1b315445978254442163@%3Ccommits.ambari.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r8b496b1743d128e6861ee0ed3c3c48cc56c505b38f84fa5baf7ae33a@%3Cdev.ambari.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r5c95eff679dfc642e9e4ab5ac6d202248a59cb1e9457cfbe8b729ac5@%3Cissues.ambari.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/rf00d8f4101a1c1ea4de6ea1e09ddf7472cfd306745c90d6da87ae074@%3Cdev.hive.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r7e6a213eea7f04fc6d9e3bd6eb8d68c4df92a22e956e95cb2c482865@%3Cissues.hive.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/rc9efaf6db98bee19db1bc911d0fa442287dac5cb229d4aaa08b6a13d@%3Cissues.hive.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r503e64b43a57fd68229cac4a869d1a9a2eac9e75f8719cad3a840211@%3Ccommits.pulsar.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r918caad55dcc640a16753b00d8d6acb90b4e36de4b6156d0867246ec@%3Ccommits.pulsar.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/r3589ed0d18edeb79028615080d5a0e8878856436bb91774a3196d9eb@%3Ccommits.pulsar.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/rb18ed999153ef0f0cb7af03efe0046c42c7242fd77fbd884a75ecfdc@%3Ccommits.pulsar.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/raf7ca57033e537e4f9d7df7f192fa6968c1e49409b2348e08d807ccb@%3Cuser.ignite.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/ra889d95141059c6cbe77dd80249bb488ae53b274b5f3abad09d9511d@%3Cuser.ignite.apache.org%3E
    Removed Reference Pivotal Software, Inc. https://lists.apache.org/thread.html/rd462a8b0dfab4c15e67c0672cd3c211ecd0e4f018f824082ed54f665@%3Cissues.hive.apache.org%3E
  • Modified Analysis by [email protected]

    Mar. 01, 2023

    Action Type Old Value New Value
  • Modified Analysis by [email protected]

    Jun. 23, 2022

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions up to (including) 4.2.9 *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 4.3.0 up to (excluding) 4.3.29 *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.0.0 up to (excluding) 5.0.19 *cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.1.0 up to (excluding) 5.1.18 *cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.2.0 up to (excluding) 5.2.9 OR *cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:* versions up to (excluding) 4.3.29 *cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.0.0 up to (excluding) 5.0.19 *cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.1.0 up to (excluding) 5.1.18 *cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.2.0 up to (excluding) 5.2.9
  • Modified Analysis by [email protected]

    May. 12, 2022

    Action Type Old Value New Value
    Changed Reference Type https://www.oracle.com/security-alerts/cpuapr2022.html No Types Assigned https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
    Changed Reference Type https://www.oracle.com/security-alerts/cpujan2022.html Third Party Advisory https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory
    Changed CPE Configuration OR *cpe:2.3:a:oracle:communications_brm:11.3.0.9:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_brm:12.0.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_design_studio:7.3.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_design_studio:7.3.5:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_design_studio:7.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:* versions from (including) 8.2.1 up to (including) 8.2.2.1 *cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:* *cpe:2.3:a:oracle:endeca_information_discovery_integrator:3.2.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.6 up to (including) 8.1.0 *cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:fusion_middleware:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:goldengate_application_adapters:19.1.0.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:healthcare_master_person_index:4.0.2.5:*:*:*:*:*:*:* *cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:10.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:10.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:11.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:*:*:*:*:*:*:*:* versions from (including) 11.1.0 up to (including) 11.3.0 *cpe:2.3:a:oracle:insurance_rules_palette:10.2.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:10.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:11.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:*:*:*:*:*:*:*:* versions from (including) 11.1.0 up to (including) 11.3.0 *cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* versions up to (including) 8.0.22 *cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.23:*:*:*:*:*:*:* *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 16.2.0 up to (including) 16.2.11 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 17.12.0 up to (including) 17.12.9 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 18.8.0 up to (including) 18.8.10 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 19.12.0 up to (including) 19.12.10 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 16.1.0 up to (including) 16.2.20 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 17.1.0 up to (including) 17.12.19 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 18.1.0 up to (including) 18.8.21 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 19.12.0 up to (including) 19.12.10 *cpe:2.3:a:oracle:retail_assortment_planning:16.0.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_bulk_data_integration:16.0.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_customer_engagement:*:*:*:*:*:*:*:* versions from (including) 16.0 up to (including) 19.0 *cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:*:*:*:*:*:*:*:* versions from (including) 16.0 up to (including) 19.0 *cpe:2.3:a:oracle:retail_financial_integration:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_financial_integration:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_financial_integration:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_invoice_matching:14.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_invoice_matching:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_predictive_application_server:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* OR *cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_brm:11.3.0.9:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_brm:12.0.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_design_studio:7.3.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_design_studio:7.3.5:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_design_studio:7.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:* versions from (including) 8.2.1 up to (including) 8.2.2.1 *cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:* *cpe:2.3:a:oracle:endeca_information_discovery_integrator:3.2.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.6 up to (including) 8.1.0 *cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:fusion_middleware:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:goldengate_application_adapters:19.1.0.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:healthcare_master_person_index:4.0.2.5:*:*:*:*:*:*:* *cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:10.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:10.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:11.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:*:*:*:*:*:*:*:* versions from (including) 11.1.0 up to (including) 11.3.0 *cpe:2.3:a:oracle:insurance_rules_palette:10.2.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:10.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:11.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:*:*:*:*:*:*:*:* versions from (including) 11.1.0 up to (including) 11.3.0 *cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* versions up to (including) 8.0.22 *cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.23:*:*:*:*:*:*:* *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 16.2.0 up to (including) 16.2.11 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 17.12.0 up to (including) 17.12.9 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 18.8.0 up to (including) 18.8.10 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 19.12.0 up to (including) 19.12.10 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 16.1.0 up to (including) 16.2.20 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 17.1.0 up to (including) 17.12.19 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 18.1.0 up to (including) 18.8.21 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 19.12.0 up to (including) 19.12.10 *cpe:2.3:a:oracle:retail_assortment_planning:16.0.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_bulk_data_integration:16.0.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_customer_engagement:*:*:*:*:*:*:*:* versions from (including) 16.0 up to (including) 19.0 *cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:*:*:*:*:*:*:*:* versions from (including) 16.0 up to (including) 19.0 *cpe:2.3:a:oracle:retail_financial_integration:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_financial_integration:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_financial_integration:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_invoice_matching:14.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_invoice_matching:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_predictive_application_server:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*
  • CVE Modified by [email protected]

    Apr. 20, 2022

    Action Type Old Value New Value
    Added Reference https://www.oracle.com/security-alerts/cpuapr2022.html [No Types Assigned]
  • CPE Deprecation Remap by [email protected]

    Apr. 11, 2022

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.2.0 from (excluding) 5.2.9 OR *cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.2.0 from (excluding) 5.2.9
  • CPE Deprecation Remap by [email protected]

    Apr. 07, 2022

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.1.0 from (excluding) 5.1.18 OR *cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.1.0 from (excluding) 5.1.18
  • Modified Analysis by [email protected]

    Feb. 17, 2022

    Action Type Old Value New Value
    Changed Reference Type https://www.oracle.com/security-alerts/cpujan2022.html No Types Assigned https://www.oracle.com/security-alerts/cpujan2022.html Third Party Advisory
    Removed CPE Configuration OR *cpe:2.3:a:apache:ambari:2.7.4:*:*:*:*:*:*:* *cpe:2.3:a:apache:ambari:2.7.5:*:*:*:*:*:*:* *cpe:2.3:a:apache:hive:4.0.0:*:*:*:*:*:*:*
    Changed CPE Configuration OR *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions up to (including) 4.2.9 *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 4.3.0 up to (including) 4.3.28 *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.0.0 up to (including) 5.0.18 *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.1.0 up to (including) 5.1.17 *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.2.0 up to (including) 5.2.8 OR *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions up to (including) 4.2.9 *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 4.3.0 up to (excluding) 4.3.29 *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.0.0 up to (excluding) 5.0.19 *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.1.0 up to (excluding) 5.1.18 *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.2.0 up to (excluding) 5.2.9
    Changed CPE Configuration OR *cpe:2.3:a:oracle:communications_brm:11.3.0.9:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_brm:12.0.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:* versions from (including) 8.2.1 up to (including) 8.2.2.1 *cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:* *cpe:2.3:a:oracle:endeca_information_discovery_integrator:3.2.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.6 up to (including) 8.1.0 *cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:fusion_middleware:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:goldengate_application_adapters:19.1.0.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:healthcare_master_person_index:4.0.2.5:*:*:*:*:*:*:* *cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:10.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:10.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:11.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:*:*:*:*:*:*:*:* versions from (including) 11.1.0 up to (including) 11.3.0 *cpe:2.3:a:oracle:insurance_rules_palette:10.2.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:10.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:11.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:*:*:*:*:*:*:*:* versions from (including) 11.1.0 up to (including) 11.3.0 *cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* versions up to (including) 8.0.22 *cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.23:*:*:*:*:*:*:* *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 16.2.0 up to (including) 16.2.11 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 17.12.0 up to (including) 17.12.9 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 18.8.0 up to (including) 18.8.10 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 19.12.0 up to (including) 19.12.10 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 16.1.0 up to (including) 16.2.20 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 17.1.0 up to (including) 17.12.19 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 18.1.0 up to (including) 18.8.21 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 19.12.0 up to (including) 19.12.10 *cpe:2.3:a:oracle:retail_assortment_planning:16.0.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_bulk_data_integration:16.0.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_customer_engagement:*:*:*:*:*:*:*:* versions from (including) 16.0 up to (including) 19.0 *cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:*:*:*:*:*:*:*:* versions from (including) 16.0 up to (including) 19.0 *cpe:2.3:a:oracle:retail_financial_integration:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_financial_integration:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_financial_integration:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_invoice_matching:14.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_invoice_matching:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_predictive_application_server:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* OR *cpe:2.3:a:oracle:communications_brm:11.3.0.9:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_brm:12.0.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_design_studio:7.3.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_design_studio:7.3.5:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_design_studio:7.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:* versions from (including) 8.2.1 up to (including) 8.2.2.1 *cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:* *cpe:2.3:a:oracle:endeca_information_discovery_integrator:3.2.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.6 up to (including) 8.1.0 *cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:fusion_middleware:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:goldengate_application_adapters:19.1.0.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:healthcare_master_person_index:4.0.2.5:*:*:*:*:*:*:* *cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:10.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:10.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:11.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:*:*:*:*:*:*:*:* versions from (including) 11.1.0 up to (including) 11.3.0 *cpe:2.3:a:oracle:insurance_rules_palette:10.2.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:10.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:11.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:*:*:*:*:*:*:*:* versions from (including) 11.1.0 up to (including) 11.3.0 *cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* versions up to (including) 8.0.22 *cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.23:*:*:*:*:*:*:* *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 16.2.0 up to (including) 16.2.11 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 17.12.0 up to (including) 17.12.9 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 18.8.0 up to (including) 18.8.10 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 19.12.0 up to (including) 19.12.10 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 16.1.0 up to (including) 16.2.20 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 17.1.0 up to (including) 17.12.19 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 18.1.0 up to (including) 18.8.21 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 19.12.0 up to (including) 19.12.10 *cpe:2.3:a:oracle:retail_assortment_planning:16.0.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_bulk_data_integration:16.0.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_customer_engagement:*:*:*:*:*:*:*:* versions from (including) 16.0 up to (including) 19.0 *cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:*:*:*:*:*:*:*:* versions from (including) 16.0 up to (including) 19.0 *cpe:2.3:a:oracle:retail_financial_integration:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_financial_integration:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_financial_integration:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_invoice_matching:14.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_invoice_matching:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_predictive_application_server:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*
  • CVE Modified by [email protected]

    Feb. 07, 2022

    Action Type Old Value New Value
    Added Reference https://www.oracle.com/security-alerts/cpujan2022.html [No Types Assigned]
  • Modified Analysis by [email protected]

    Dec. 02, 2021

    Action Type Old Value New Value
    Changed Reference Type https://www.oracle.com/security-alerts/cpuoct2021.html No Types Assigned https://www.oracle.com/security-alerts/cpuoct2021.html Not Applicable, Third Party Advisory
  • CVE Modified by [email protected]

    Oct. 20, 2021

    Action Type Old Value New Value
    Added Reference https://www.oracle.com/security-alerts/cpuoct2021.html [No Types Assigned]
  • Modified Analysis by [email protected]

    Sep. 21, 2021

    Action Type Old Value New Value
    Changed Reference Type https://lists.apache.org/thread.html/r1c679c43fa4f7846d748a937955c7921436d1b315445978254442163@%3Ccommits.ambari.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/r1c679c43fa4f7846d748a937955c7921436d1b315445978254442163@%3Ccommits.ambari.apache.org%3E Mailing List, Patch, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/r1eccdbd7986618a7319ee7a533bd9d9bf6e8678e59dd4cca9b5b2d7a@%3Cissues.ambari.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/r1eccdbd7986618a7319ee7a533bd9d9bf6e8678e59dd4cca9b5b2d7a@%3Cissues.ambari.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/r3589ed0d18edeb79028615080d5a0e8878856436bb91774a3196d9eb@%3Ccommits.pulsar.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/r3589ed0d18edeb79028615080d5a0e8878856436bb91774a3196d9eb@%3Ccommits.pulsar.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/r503e64b43a57fd68229cac4a869d1a9a2eac9e75f8719cad3a840211@%3Ccommits.pulsar.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/r503e64b43a57fd68229cac4a869d1a9a2eac9e75f8719cad3a840211@%3Ccommits.pulsar.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/r5c95eff679dfc642e9e4ab5ac6d202248a59cb1e9457cfbe8b729ac5@%3Cissues.ambari.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/r5c95eff679dfc642e9e4ab5ac6d202248a59cb1e9457cfbe8b729ac5@%3Cissues.ambari.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/r7e6a213eea7f04fc6d9e3bd6eb8d68c4df92a22e956e95cb2c482865@%3Cissues.hive.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/r7e6a213eea7f04fc6d9e3bd6eb8d68c4df92a22e956e95cb2c482865@%3Cissues.hive.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/r8b496b1743d128e6861ee0ed3c3c48cc56c505b38f84fa5baf7ae33a@%3Cdev.ambari.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/r8b496b1743d128e6861ee0ed3c3c48cc56c505b38f84fa5baf7ae33a@%3Cdev.ambari.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/r918caad55dcc640a16753b00d8d6acb90b4e36de4b6156d0867246ec@%3Ccommits.pulsar.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/r918caad55dcc640a16753b00d8d6acb90b4e36de4b6156d0867246ec@%3Ccommits.pulsar.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/r9f13cccb214495e14648d2c9b8f2c6072fd5219e74502dd35ede81e1@%3Cdev.ambari.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/r9f13cccb214495e14648d2c9b8f2c6072fd5219e74502dd35ede81e1@%3Cdev.ambari.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/ra889d95141059c6cbe77dd80249bb488ae53b274b5f3abad09d9511d@%3Cuser.ignite.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/ra889d95141059c6cbe77dd80249bb488ae53b274b5f3abad09d9511d@%3Cuser.ignite.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/raf7ca57033e537e4f9d7df7f192fa6968c1e49409b2348e08d807ccb@%3Cuser.ignite.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/raf7ca57033e537e4f9d7df7f192fa6968c1e49409b2348e08d807ccb@%3Cuser.ignite.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/rb18ed999153ef0f0cb7af03efe0046c42c7242fd77fbd884a75ecfdc@%3Ccommits.pulsar.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/rb18ed999153ef0f0cb7af03efe0046c42c7242fd77fbd884a75ecfdc@%3Ccommits.pulsar.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/rc9efaf6db98bee19db1bc911d0fa442287dac5cb229d4aaa08b6a13d@%3Cissues.hive.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/rc9efaf6db98bee19db1bc911d0fa442287dac5cb229d4aaa08b6a13d@%3Cissues.hive.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/rd462a8b0dfab4c15e67c0672cd3c211ecd0e4f018f824082ed54f665@%3Cissues.hive.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/rd462a8b0dfab4c15e67c0672cd3c211ecd0e4f018f824082ed54f665@%3Cissues.hive.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/re014a49d77f038ba70e5e9934d400af6653e8c9ac110d32b1254127e@%3Cdev.ranger.apache.org%3E Mailing List https://lists.apache.org/thread.html/re014a49d77f038ba70e5e9934d400af6653e8c9ac110d32b1254127e@%3Cdev.ranger.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://lists.apache.org/thread.html/rf00d8f4101a1c1ea4de6ea1e09ddf7472cfd306745c90d6da87ae074@%3Cdev.hive.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/rf00d8f4101a1c1ea4de6ea1e09ddf7472cfd306745c90d6da87ae074@%3Cdev.hive.apache.org%3E Mailing List, Third Party Advisory
    Changed Reference Type https://security.netapp.com/advisory/ntap-20210513-0009/ No Types Assigned https://security.netapp.com/advisory/ntap-20210513-0009/ Third Party Advisory
    Changed Reference Type https://www.oracle.com//security-alerts/cpujul2021.html No Types Assigned https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory
    Changed Reference Type https://www.oracle.com/security-alerts/cpuApr2021.html No Types Assigned https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory
    Changed Reference Type https://www.oracle.com/security-alerts/cpujan2021.html No Types Assigned https://www.oracle.com/security-alerts/cpujan2021.html Patch, Third Party Advisory
    Added CPE Configuration OR *cpe:2.3:a:apache:ambari:2.7.4:*:*:*:*:*:*:* *cpe:2.3:a:apache:ambari:2.7.5:*:*:*:*:*:*:* *cpe:2.3:a:apache:hive:4.0.0:*:*:*:*:*:*:*
    Added CPE Configuration OR *cpe:2.3:a:oracle:communications_brm:11.3.0.9:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_brm:12.0.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:* versions from (including) 8.2.1 up to (including) 8.2.2.1 *cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:* *cpe:2.3:a:oracle:endeca_information_discovery_integrator:3.2.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.6 up to (including) 8.1.0 *cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:fusion_middleware:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:goldengate_application_adapters:19.1.0.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:healthcare_master_person_index:4.0.2.5:*:*:*:*:*:*:* *cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:10.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:10.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:11.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_policy_administration:*:*:*:*:*:*:*:* versions from (including) 11.1.0 up to (including) 11.3.0 *cpe:2.3:a:oracle:insurance_rules_palette:10.2.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:10.2.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:11.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:insurance_rules_palette:*:*:*:*:*:*:*:* versions from (including) 11.1.0 up to (including) 11.3.0 *cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* versions up to (including) 8.0.22 *cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.23:*:*:*:*:*:*:* *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 16.2.0 up to (including) 16.2.11 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 17.12.0 up to (including) 17.12.9 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 18.8.0 up to (including) 18.8.10 *cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 19.12.0 up to (including) 19.12.10 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 16.1.0 up to (including) 16.2.20 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 17.1.0 up to (including) 17.12.19 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 18.1.0 up to (including) 18.8.21 *cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* versions from (including) 19.12.0 up to (including) 19.12.10 *cpe:2.3:a:oracle:retail_assortment_planning:16.0.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_bulk_data_integration:16.0.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_customer_engagement:*:*:*:*:*:*:*:* versions from (including) 16.0 up to (including) 19.0 *cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:*:*:*:*:*:*:*:* versions from (including) 16.0 up to (including) 19.0 *cpe:2.3:a:oracle:retail_financial_integration:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_financial_integration:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_financial_integration:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_integration_bus:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_invoice_matching:14.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_invoice_matching:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_predictive_application_server:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:14.1.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:15.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_service_backbone:16.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:* *cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*
    Added CPE Configuration OR *cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* *cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:* *cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*
  • CVE Modified by [email protected]

    Jul. 20, 2021

    Action Type Old Value New Value
    Added Reference https://www.oracle.com//security-alerts/cpujul2021.html [No Types Assigned]
  • CVE Modified by [email protected]

    Jun. 14, 2021

    Action Type Old Value New Value
    Added Reference https://www.oracle.com/security-alerts/cpuApr2021.html [No Types Assigned]
  • CVE Modified by [email protected]

    May. 13, 2021

    Action Type Old Value New Value
    Added Reference https://security.netapp.com/advisory/ntap-20210513-0009/ [No Types Assigned]
  • CVE Modified by [email protected]

    Jan. 20, 2021

    Action Type Old Value New Value
    Added Reference https://www.oracle.com/security-alerts/cpujan2021.html [No Types Assigned]
  • CVE Modified by [email protected]

    Jan. 07, 2021

    Action Type Old Value New Value
    Added Reference https://lists.apache.org/thread.html/rd462a8b0dfab4c15e67c0672cd3c211ecd0e4f018f824082ed54f665@%3Cissues.hive.apache.org%3E [No Types Assigned]
  • CVE Modified by [email protected]

    Nov. 20, 2020

    Action Type Old Value New Value
    Added Reference https://lists.apache.org/thread.html/ra889d95141059c6cbe77dd80249bb488ae53b274b5f3abad09d9511d@%3Cuser.ignite.apache.org%3E [No Types Assigned]
  • CVE Modified by [email protected]

    Nov. 17, 2020

    Action Type Old Value New Value
    Added Reference https://lists.apache.org/thread.html/raf7ca57033e537e4f9d7df7f192fa6968c1e49409b2348e08d807ccb@%3Cuser.ignite.apache.org%3E [No Types Assigned]
  • CVE Modified by [email protected]

    Oct. 28, 2020

    Action Type Old Value New Value
    Added Reference https://lists.apache.org/thread.html/rb18ed999153ef0f0cb7af03efe0046c42c7242fd77fbd884a75ecfdc@%3Ccommits.pulsar.apache.org%3E [No Types Assigned]
  • CVE Modified by [email protected]

    Oct. 27, 2020

    Action Type Old Value New Value
    Added Reference https://lists.apache.org/thread.html/r3589ed0d18edeb79028615080d5a0e8878856436bb91774a3196d9eb@%3Ccommits.pulsar.apache.org%3E [No Types Assigned]
  • CVE Modified by [email protected]

    Oct. 23, 2020

    Action Type Old Value New Value
    Added Reference https://lists.apache.org/thread.html/r918caad55dcc640a16753b00d8d6acb90b4e36de4b6156d0867246ec@%3Ccommits.pulsar.apache.org%3E [No Types Assigned]
  • CVE Modified by [email protected]

    Oct. 23, 2020

    Action Type Old Value New Value
    Added Reference https://lists.apache.org/thread.html/r503e64b43a57fd68229cac4a869d1a9a2eac9e75f8719cad3a840211@%3Ccommits.pulsar.apache.org%3E [No Types Assigned]
  • CVE Modified by [email protected]

    Oct. 22, 2020

    Action Type Old Value New Value
    Added Reference https://lists.apache.org/thread.html/rf00d8f4101a1c1ea4de6ea1e09ddf7472cfd306745c90d6da87ae074@%3Cdev.hive.apache.org%3E [No Types Assigned]
    Added Reference https://lists.apache.org/thread.html/r7e6a213eea7f04fc6d9e3bd6eb8d68c4df92a22e956e95cb2c482865@%3Cissues.hive.apache.org%3E [No Types Assigned]
    Added Reference https://lists.apache.org/thread.html/rc9efaf6db98bee19db1bc911d0fa442287dac5cb229d4aaa08b6a13d@%3Cissues.hive.apache.org%3E [No Types Assigned]
  • CVE Modified by [email protected]

    Oct. 21, 2020

    Action Type Old Value New Value
    Added Reference https://lists.apache.org/thread.html/r5c95eff679dfc642e9e4ab5ac6d202248a59cb1e9457cfbe8b729ac5@%3Cissues.ambari.apache.org%3E [No Types Assigned]
  • CVE Modified by [email protected]

    Oct. 19, 2020

    Action Type Old Value New Value
    Added Reference https://lists.apache.org/thread.html/r9f13cccb214495e14648d2c9b8f2c6072fd5219e74502dd35ede81e1@%3Cdev.ambari.apache.org%3E [No Types Assigned]
    Added Reference https://lists.apache.org/thread.html/r1c679c43fa4f7846d748a937955c7921436d1b315445978254442163@%3Ccommits.ambari.apache.org%3E [No Types Assigned]
    Added Reference https://lists.apache.org/thread.html/r8b496b1743d128e6861ee0ed3c3c48cc56c505b38f84fa5baf7ae33a@%3Cdev.ambari.apache.org%3E [No Types Assigned]
  • CVE Modified by [email protected]

    Oct. 13, 2020

    Action Type Old Value New Value
    Added Reference https://lists.apache.org/thread.html/r1eccdbd7986618a7319ee7a533bd9d9bf6e8678e59dd4cca9b5b2d7a@%3Cissues.ambari.apache.org%3E [No Types Assigned]
  • Modified Analysis by [email protected]

    Oct. 07, 2020

    Action Type Old Value New Value
    Added CVSS V2 Metadata Victim must voluntarily interact with attack mechanism
    Removed CVSS V2 NIST (AV:N/AC:L/Au:S/C:P/I:P/A:P)
    Added CVSS V2 NIST (AV:N/AC:H/Au:S/C:P/I:P/A:N)
    Removed CVSS V3.1 NIST AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    Added CVSS V3.1 NIST AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N
    Changed Reference Type https://lists.apache.org/thread.html/re014a49d77f038ba70e5e9934d400af6653e8c9ac110d32b1254127e@%3Cdev.ranger.apache.org%3E No Types Assigned https://lists.apache.org/thread.html/re014a49d77f038ba70e5e9934d400af6653e8c9ac110d32b1254127e@%3Cdev.ranger.apache.org%3E Mailing List
  • CVE Modified by [email protected]

    Oct. 07, 2020

    Action Type Old Value New Value
    Added Reference https://lists.apache.org/thread.html/re014a49d77f038ba70e5e9934d400af6653e8c9ac110d32b1254127e@%3Cdev.ranger.apache.org%3E [No Types Assigned]
  • Initial Analysis by [email protected]

    Sep. 30, 2020

    Action Type Old Value New Value
    Added CVSS V2 NIST (AV:N/AC:L/Au:S/C:P/I:P/A:P)
    Added CVSS V3.1 NIST AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type https://tanzu.vmware.com/security/cve-2020-5421 No Types Assigned https://tanzu.vmware.com/security/cve-2020-5421 Vendor Advisory
    Added CWE NIST NVD-CWE-noinfo
    Added CPE Configuration OR *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions up to (including) 4.2.9 *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 4.3.0 up to (including) 4.3.28 *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.0.0 up to (including) 5.0.18 *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.1.0 up to (including) 5.1.17 *cpe:2.3:a:pivotal_software:spring_framework:*:*:*:*:*:*:*:* versions from (including) 5.2.0 up to (including) 5.2.8
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2020-5421 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2020-5421 weaknesses.

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

13.00 }} -2.30%

score

0.95620

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
: