VDB

BDU%3A2020-03624

BDU%3A2020-03624 PUBLISHED CVSS 4.300000190734863 MEDIUM

Уязвимость реализации класса SmtpAppender библиотеки журналирования Java-программ Log4j, позволяющая нарушителю реализовать атаку типа «человек посередине»

Risk Scores

CVSS 2.0
4.300000190734863

Affected Products

VendorProductVersions
Red Hat Inc., Oracle Corp., Apache Software Foundation, Cisco Systems Inc., АО «Концерн ВНИИНС»Red Hat Enterprise Linux, WebLogic Server, Enterprise Repository, Fusion Middleware MapViewer, Primavera Unifier, PeopleSoft Enterprise PeopleTools, Oracle Retail Customer Management and Segmentation Foundation, Oracle Retail Order Broker, Instantis EnterpriseTrack, Agile Engineering Data Management, Oracle Data Integrator, Jboss Fuse, Utilities Framework, Application Testing Suite, OpenShift Application Runtimes, Oracle Policy Automation Connector for Siebel, JBoss Data Grid, Red Hat Single Sign-On, Red Hat Process Automation Manager, Oracle Communications Unified Inventory Management, Red Hat Descision Manager, Oracle Retail Assortment Planning, JBoss A-MQ Streaming, Oracle Communications Interactive Session Recorder, Oracle Endeca Information Discovery Studio, Oracle Retail Predictive Application Server, Retail Integration Bus, Primavera Gateway, Oracle Retail Financial Integration, Financial Services Price Creation and Discovery, Oracle Retail Service Backbone, Rapid Planning, Enterprise Manager Ops Center, Communications MetaSolv Solution, Oracle Communications Order and Service Management, Financial Services Analytical Applications Infrastructure, Oracle FLEXCUBE Investor Servicing, Oracle FLEXCUBE Private Banking, Oracle Banking Enterprise Collections, Category Management Planning & Optimization, Oracle Retail Bulk Data Integration, Oracle Retail Data Extractor for Merchandising, Oracle Retail Item Planning, Oracle Retail Macro Space Optimization, Oracle Retail Merchandise Financial Planning, Oracle Retail Regular Price Optimization, Oracle Retail Replenishment Optimization, Oracle Retail Size Profile Optimization, Retail Store Inventory Management, Communications Instant Messaging Server, Communications Network Charging and Control, Communications Billing and Revenue Management, Siebel Engineering - Installer & Deployment, Log4j, A-MQ Clients, JD Edwards EnterpriseOne Tools, Oracle Communications Network Integrity, Oracle Financial Services Lending and Leasing, Banking Platform, Oracle Insurance Data Gateway, Oracle Retail Extract Transform and Load, Data Grid, Oracle Communications Services Gatekeeper, Financial Services Retail Customer Analytics, Insurance Policy Administration J2EE, Insurance Insbridge Rating and Underwriting, Hyperion Infrastructure Technology, FLEXCUBE Core Banking, Oracle GoldenGate Application Adapters, Communications Application Session Controller, Oracle Policy Automation, Oracle Policy Automation for Mobile Devices, Oracle Insurance Rules Palette, Retail Advanced Inventory Planning, Siebel UI Framework, Oracle Health Sciences Information Manager, StorageTek Tape Analytics SW Tool, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177)

Timeline

  • Jul 31, 2020 CVE Published
  • Nov 21, 2023 CVE Updated

References

…and 5 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›