CVSS 8.8 · High EPSS 54,4%
Kerentanan Deserialization of Untrusted Data pada apache chainsaw, apache log4j +24 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| apache | chainsaw | Semua versi sebelum 2.1.0 |
| apache | log4j | Versi 1.2 hingga sebelum 2.0 |
| qos | reload4j | Semua versi sebelum 1.2.18.1 |
| oracle | advanced supply chain planning | Versi 12.1 |
| oracle | advanced supply chain planning | Versi 12.2 |
| oracle | business intelligence | Versi 5.9.0.0.0 |
| oracle | business intelligence | Versi 12.2.1.3.0 |
| oracle | business intelligence | Versi 12.2.1.4.0 |
| oracle | business process management suite | Versi 12.2.1.3.0 |
| oracle | business process management suite | Versi 12.2.1.4.0 |
| oracle | communications eagle ftp table base retrieval | Versi 4.5 |
| oracle | communications instant messaging server | Versi 10.0.1.5.0 |
| oracle | communications messaging server | Versi 8.1 |
| oracle | communications network integrity | Versi 7.3.6 |
| oracle | communications offline mediation controller | Semua versi sebelum 12.0.0.4.4 |
| oracle | communications offline mediation controller | Versi 12.0.0.5.0 |
| oracle | communications unified inventory management | Versi 7.4.1 |
| oracle | communications unified inventory management | Versi 7.4.2 |
| oracle | e-business suite cloud manager and cloud backup module | Semua versi sebelum 2.2.1.1.1 |
| oracle | e-business suite cloud manager and cloud backup module | Versi 2.2.1.1.1 |
| oracle | enterprise manager base platform | Versi 13.4.0.0 |
| oracle | enterprise manager base platform | Versi 13.5.0.0 |
| oracle | financial services revenue management and billing analytics | Versi 2.7.0.0 |
| oracle | financial services revenue management and billing analytics | Versi 2.7.0.1 |
| oracle | financial services revenue management and billing analytics | Versi 2.8.0.0 |
| oracle | healthcare foundation | Versi 8.1.0 |
| oracle | hyperion data relationship management | Semua versi sebelum 11.2.8.0 |
| oracle | hyperion infrastructure technology | Semua versi sebelum 11.2.8.0 |
| oracle | identity management suite | Versi 12.2.1.3.0 |
| oracle | identity management suite | Versi 12.2.1.4.0 |
| oracle | identity manager connector | Versi 11.1.1.5.0 |
| oracle | jdeveloper | Versi 12.2.1.3.0 |
| oracle | middleware common libraries and tools | Versi 12.2.1.4.0 |
| oracle | mysql enterprise monitor | Semua versi hingga 8.0.29 |
| oracle | retail extract transform and load | Versi 13.2.5 |
| oracle | tuxedo | Versi 12.2.2.0.0 |
| oracle | weblogic server | Versi 12.2.1.3.0 |
| oracle | weblogic server | Versi 12.2.1.4.0 |
| oracle | weblogic server | Versi 14.1.1.0.0 |