VDB
BDU%3A2020-00970
BDU%3A2020-00970
PUBLISHED
CVSS 4.599999904632568 MEDIUM
Уязвимость набора инструментов XSSFExportToXml Java-библиотеки для чтения и записи документов MS Office Apache POI, позволяющая нарушителю получить несанкционированный доступ на чтение файлов
Risk Scores
CVSS 2.0
4.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Apache Software Foundation | Enterprise Repository, Primavera Unifier, WebCenter Portal, Oracle Retail Order Broker, Enterprise Manager Base Platform, Application Testing Suite, Primavera Gateway, Oracle Financial Services Market Risk Measurement and Management, Oracle Endeca Information Discovery Studio, Oracle Retail Clearance Optimization Engine, Oracle Retail Predictive Application Server, POI, Banking Platform, Banking Enterprise Product Manufacturing, Financial Services Analytical Applications Infrastructure, Oracle Banking Enterprise Originations, Oracle Big Data Discovery, Insurance Policy Administration J2EE, Oracle Insurance Rules Palette, Oracle FLEXCUBE Private Banking, Oracle Banking Payments, Communications Diameter Signaling Router, Hyperion Infrastructure Technology |
Timeline
- Mar 12, 2020 CVE Published
- Feb 25, 2021 CVE Updated
References
- https://lists.apache.org/thread.html/13a54b6a03369cfb418a699180ffb83bd727320b6ddfec198b9b728e@%3Cannounce.apache.org%3E url
- https://lists.apache.org/thread.html/2ac0327748de0c2b3c1c012481b79936797c711724e0b7da83cf564c@%3Cuser.tika.apache.org%3E url
- https://lists.apache.org/thread.html/895164e03a3c327449069e2fd6ced0367561878b3ae6a8ec740c2007@%3Cuser.tika.apache.org%3E url
- https://lists.apache.org/thread.html/d88b8823867033514d7ec05d66f88c70dc207604d3dcbd44fd88464c@%3Cuser.tika.apache.org%3E url
- https://www.oracle.com/security-alerts/cpuapr2020.html url
- https://www.oracle.com/security-alerts/cpujan2020.html url
- https://www.oracle.com/security-alerts/cpujul2020.html url
- https://www.oracle.com/security-alerts/cpuoct2020.html url
- https://www.oracle.com/security-alerts/cpujan2021.html url