VDB
BDU%3A2021-00711
BDU%3A2021-00711
PUBLISHED
CVSS 5.800000190734863 MEDIUM
Уязвимость каркаса для веб-сервисов Apache CXF, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю проводить межсайтовые сценарные атаки
Risk Scores
CVSS 2.0
5.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Red Hat Inc., Apache Software Foundation | PeopleSoft Enterprise PeopleTools, Oracle Communications Messaging Server, Jboss Fuse, Utilities Framework, OpenShift Application Runtimes, Red Hat Single Sign-On, Red Hat Descision Manager, Red Hat Process Automation, CXF, Oracle Retail Order Broker Cloud Service, Communications Application Session Controller, JD Edwards EnterpriseOne Tools |
Timeline
- Feb 16, 2021 CVE Published
- Apr 29, 2021 CVE Updated
References
- http://cxf.apache.org/security-advisories.data/CVE-2020-13954.txt.asc?version=1&modificationDate=1605183670659&api=v2 url
- https://lists.apache.org/thread.html/r51fdd73548290b2dfd0b48f7ab69bf9ae064dd100364cd8a15f0b3ec@%3Cdev.cxf.apache.org%3E url
- https://www.oracle.com/security-alerts/cpujan2021.html url
- https://access.redhat.com/security/cve/cve-2020-13954 url
- https://lists.apache.org/thread.html/r51fdd73548290b2dfd0b48f7ab69bf9ae064dd100364cd8a15f0b3ec@%3Cannounce.apache.org%3E advisory
- https://lists.apache.org/thread.html/r51fdd73548290b2dfd0b48f7ab69bf9ae064dd100364cd8a15f0b3ec@%3Cusers.cxf.apache.org%3E advisory
- https://lists.apache.org/thread.html/r81a41a2915985d49bc3ea57dde2018b03584a863878a8532a89f993f@%3Cusers.cxf.apache.org%3E advisory
- https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d advisory
- https://www.oracle.com/security-alerts/cpuapr2021.html advisory