VDB
BDU%3A2017-02651
BDU%3A2017-02651
PUBLISHED
CVSS 10 CRITICAL
Уязвимость библиотеки Apache Commons Collections, связанная с восстановлением в памяти недостоверных данных, позволяющая нарушителю выполнять произвольные команды
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Oracle Corp. | OpenShift, JBoss Enterprise Application Platform, xPAAS, JBoss A-MQ, Jboss SOA Platform, Jboss Fuse Service Works, Subscription Asset Manager, Jboss Portal, Jboss Operations Network, Jboss Fuse, Jboss Web Server, Jboss BRMS, Jboss BPM Suite, Data Grid, Identity Manager, Retail Xstore Point of Service, Oracle Retail Clearance Optimization Engine, Communications Performance Intelligence Center (PIC) Software, Rapid Planning, Identity Manager Connector, Tape Library ACSLS, Communications Application Session Controller |
Timeline
- Dec 26, 2017 CVE Published
- Jun 2, 2021 CVE Updated
References
- https://www.oracle.com/security-alerts/cpuoct2016.html url
- http://www.securityfocus.com/bid/78215 url
- http://www.securitytracker.com/id/1034097 url
- http://www.securitytracker.com/id/1037052 url
- http://www.securitytracker.com/id/1037053 url
- http://www.securitytracker.com/id/1037640 url
- https://access.redhat.com/security/vulnerabilities/2059393 url
- https://access.redhat.com/solutions/2045023 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1279330 url
- https://www.oracle.com/security-alerts/cpuoct2018.html url
- https://www.oracle.com/security-alerts/cpujul2018.html url
- https://www.oracle.com/security-alerts/cpujan2018.html url
- https://www.oracle.com/security-alerts/cpujul2020.html url