csirt@kutim:~/threat-intel/cve/CVE-2020-17521

Katalog CVE

CVSS 5.5 · Medium EPSS 1,0%

Kerentanan pada apache groovy, netapp snapcenter +19 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.

Rincian

Terbit di NVD
7 Desember 2020
Terakhir diubah
8 Oktober 2026
Status NVD
Modified
CVSS 3.1
5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
EPSS (30 hari)
1,0% peluang dieksploitasi; lebih tinggi dari 62,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
apache groovy Versi 2.0.0 hingga 2.4.20
apache groovy Versi 2.5.0 hingga 2.5.13
apache groovy Versi 3.0.0 hingga 3.0.6
apache groovy Versi 4.0.0 alpha1
netapp snapcenter Semua versi
oracle agile engineering data management Versi 6.2.1.0
oracle agile plm mcad connector Versi 3.4
oracle agile plm mcad connector Versi 3.6
oracle agile product lifecycle management Versi 9.3.3
oracle agile product lifecycle management Versi 9.3.6
oracle business process management suite Versi 12.2.1.3.0
oracle business process management suite Versi 12.2.1.4.0
oracle communications brm - elastic charging engine Versi 11.3.0.9.0
oracle communications brm - elastic charging engine Versi 12.0.0.3
oracle communications diameter signaling router Versi 8.4.0.0
oracle communications evolved communications application server Versi 7.1
oracle communications services gatekeeper Versi 6.0
oracle communications services gatekeeper Versi 6.1
oracle communications services gatekeeper Versi 7.0
oracle healthcare data repository Versi 7.0.2
oracle hospitality opera 5 Versi 5.6
oracle ilearning Versi 6.2
oracle ilearning Versi 6.3
oracle insurance policy administration Versi 11.0 hingga 11.3.1
oracle jd edwards enterpriseone orchestrator Versi 9.2.6.0
oracle primavera gateway Versi 17.12.0 hingga 17.12.10
oracle primavera unifier Versi 17.7 hingga 17.12
oracle primavera unifier Versi 16.1
oracle primavera unifier Versi 16.2
oracle primavera unifier Versi 18.8
oracle primavera unifier Versi 19.12
oracle primavera unifier Versi 20.12
oracle retail bulk data integration Versi 15.0.3.0
oracle retail bulk data integration Versi 16.0.3.0
oracle retail merchandising system Versi 16.0.3
oracle retail store inventory management Versi 14.1.3.10
oracle retail store inventory management Versi 15.0.3.5
oracle retail store inventory management Versi 16.0.3.5
apache atlas Versi 2.1.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 9 Okt 2026, 12:28 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.