VDB

BDU%3A2020-04038

BDU%3A2020-04038 PUBLISHED CVSS 10 CRITICAL

Уязвимость реализации функции new org.dom4j.io.SAXReader() библиотеки для работы с XML, XPath и XSLT dom4j, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Risk Scores

CVSS 2.0
10

Affected Products

VendorProductVersions
Red Hat Inc., Oracle Corp., Novell Inc., Сообщество свободного программного обеспечения, АО "НППКТ", АО «НТЦ ИТ РОСА», Google IncRed Hat Enterprise Linux, Business Process Management Suite, Oracle Endeca Information Discovery Integrator, WebCenter Portal, Oracle Retail Customer Management and Segmentation Foundation, Oracle Retail Order Broker, Oracle Communications Unified Inventory Management, Red Hat JBoss Fuse, OpenSUSE Leap, Oracle Data Integrator, Utilities Framework, Application Testing Suite, Red Hat Software Collections, JBoss Enterprise Application Platform, Red Hat Single Sign-On, JBoss Enterprise Application Platform Continuous Delivery, Red Hat Descision Manager, Retail Integration Bus, Oracle Agile PLM, Rapid Planning, Financial Services Analytical Applications Infrastructure, Primavera P6 Enterprise Project Portfolio Management, dom4j, Red Hat Process Automation, Communications Diameter Signaling Router, Banking Platform, Communications Application Session Controller, Oracle Health Sciences Empirica Signal, Oracle Retail Price Management Security, Oracle Health Sciences Information Manager, Enterprise Data Quality, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), РОСА ХРОМ (запись в едином реестре российских программ №1607), Android Studio

Timeline

  • Aug 26, 2020 CVE Published
  • Feb 10, 2026 CVE Updated
  • Mar 19, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›