VDB
BDU%3A2021-00682
BDU%3A2021-00682
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость Java-библиотеки для чтения и записи документов MS Office Apache POI, связанная с выполнением цикла с недоступным условием выхода, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Red Hat Inc., Apache Software Foundation | PeopleSoft Enterprise PeopleTools, Oracle Endeca Information Discovery Integrator, Oracle Communications Unified Inventory Management, Oracle Utilities Network Management System, Enterprise Manager Base Platform, Application Testing Suite, Retail Xstore Point of Service, Jboss Fuse, Oracle Endeca Information Discovery Studio, Oracle FLEXCUBE Private Banking, Communications Diameter Signaling Router, Oracle Agile PLM, Insurance Policy Administration J2EE, Enterprise Data Quality, POI, Oracle Retail Fusion Platform, Oracle Retail Sales Audit |
Timeline
- Feb 11, 2021 CVE Published
- May 20, 2021 CVE Updated
References
- https://lists.apache.org/thread.html/453d9af5dbabaccd9afb58d27279a9dbfe8e35f4e5ea1645ddd6960b@%3Cdev.poi.apache.org%3E url
- https://access.redhat.com/security/cve/cve-2017-12626 url
- https://www.oracle.com/security-alerts/cpujan2021.html advisory
- https://www.oracle.com/security-alerts/cpuapr2021.html advisory