Orta CVSS 6.5
CVE-2020-5421: Spring Framework: güvenlik açığı
Açıklama (NVD)
In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.
Özet bilgiler
- Ürün
- Vmware Spring Framework
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N - EPSS
- %11,56 (yüzdelik 96)
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| vmware-spring-framework | — | — | 4.3.29 |
| vmware-spring-framework | 5.0.0 | — | 5.0.19 |
| vmware-spring-framework | 5.1.0 | — | 5.1.18 |
| vmware-spring-framework | 5.2.0 | — | 5.2.9 |
| oracle-commerce-guided-search | 11.3.2 | 11.3.2 | — |
| oracle-communications-brm | 11.3.0.9 | 11.3.0.9 | — |
| oracle-communications-brm | 12.0.0.3 | 12.0.0.3 | — |
| oracle-communications-design-studio | 7.3.4 | 7.3.4 | — |
| oracle-communications-design-studio | 7.3.5 | 7.3.5 | — |
| oracle-communications-design-studio | 7.4.0 | 7.4.0 | — |
| oracle-communications-session-report-manager | 8.2.1 | 8.2.2.1 | — |
| oracle-communications-unified-inventory-management | 7.3.4 | 7.3.4 | — |
| oracle-communications-unified-inventory-management | 7.3.5 | 7.3.5 | — |
| oracle-endeca-information-discovery-integrator | 3.2.0 | 3.2.0 | — |
| oracle-enterprise-data-quality | 12.2.1.3.0 | 12.2.1.3.0 | — |
| oracle-enterprise-data-quality | 12.2.1.4.0 | 12.2.1.4.0 | — |
| oracle-financial-services-analytical-applications-infrastructure | 8.0.6 | 8.1.0 | — |
| oracle-flexcube-private-banking | 12.0.0 | 12.0.0 | — |
| oracle-flexcube-private-banking | 12.1.0 | 12.1.0 | — |
| oracle-fusion-middleware | 12.2.1.3.0 | 12.2.1.3.0 | — |
| oracle-fusion-middleware | 12.2.1.4.0 | 12.2.1.4.0 | — |
| oracle-goldengate-application-adapters | 19.1.0.0.0 | 19.1.0.0.0 | — |
| oracle-healthcare-master-person-index | 4.0.2.5 | 4.0.2.5 | — |
| oracle-hyperion-infrastructure-technology | 11.1.2.4 | 11.1.2.4 | — |
| oracle-insurance-policy-administration | 11.1.0 | 11.3.0 | — |
| oracle-insurance-policy-administration | 10.2 | 10.2 | — |
| oracle-insurance-policy-administration | 10.2.4 | 10.2.4 | — |
| oracle-insurance-policy-administration | 11.0.2 | 11.0.2 | — |
| oracle-insurance-rules-palette | 11.1.0 | 11.3.0 | — |
| oracle-insurance-rules-palette | 10.2.0 | 10.2.0 | — |
Kaynaklar
- NVD kaydı
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- security.netapp.com
- tanzu.vmware.com
- www.oracle.com
- www.oracle.com
- www.oracle.com
- www.oracle.com
- www.oracle.com
- www.oracle.com