VRT 391,810 CVEs tracked · 15,472 in RASP scope · data as of 42 minutes ago

CVE-2020-9488

3.7 Low Out of RASP scope

Description

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1

CWE-295

Exploitation Status

No public exploit

Nothing published shows this CVE being exploited. The 1 repository below are public repositories under the 5-star bar: published, but with nobody other than their authors having looked.

CVSS E:U

  • CISA KEV not listed
  • CISA Vulnrichment exploitation: none
  • Indexed PoC 1 indexed Published artifacts you can open, in GitHub PoC; first seen 2025-07-07.
  • EPSS 8.1% chance in 30 days

1 of these are GitHub repositories below the 5★ evidence bar. They are listed because a person may still want to open one; they do not count toward the exploit maturity above.

IndexArtifactStarsFirst seen
GitHub PoC Demo of CVE-2020-9488: Unsafe logging with Log4j and remediation 2025-07-07

Waratek Defense Posture

Out of RASP scope

A genuine Java vulnerability in a supported product that the agent cannot reach: a coverage gap, not an out-of-domain finding.

  • Protection none
  • Action not-needed none
  • Review human manual-review
  • Record active
Decided by manual classification : Manual classification of this CVE in the legacy dataset
Finding Manual classification marked OUT-OF-SCOPE but CVE matches known CPE products

CVSS

3.7 LOW v3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 3 metrics

VRT selects the newest version's highest entry and publishes it as cvssScore, newest rather than largest because scores are not comparable across versions, and highest rather than first because the first entry is frequently a CNA placeholder scoring 0.0 over NVD's own analysis.

VersionScoreBandVectorAssignerType
CVSS 3.1 3.7 LOW CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N NVD Primary published
CVSS 3.1 3.7 LOW CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CISA-ADP Secondary
CVSS 2.0 4.3 no band published AV:N/AC:M/Au:N/C:P/I:N/A:N NVD Primary

Affected Software & Releases

🏛️ Oracle CPU Advisories & Products

AdvisoryTypeQuarterProducts Oracle named in risk matrix
Oracle Critical Patch Update April 2022 ↗ CPU 2022-Q2 Oracle Systems / Software (Apache Log4j) (8.5.1)
Oracle Critical Patch Update October 2021 ↗ CPU 2021-Q4 Oracle Communications / Logging (Apache Log4j) (4.5)
Oracle Siebel CRM / Marketing (Apache Log4j) (21.9 and prior)
Oracle Critical Patch Update April 2021 ↗ CPU 2021-Q2 Oracle JD Edwards / World Software Security (Apache Log4j) (A9.4)
Oracle Retail Applications / OBIEE - Metadata (Apache Log4j) (19.0)
Oracle Retail Applications / Unified Payments (Apache Log4j) (15.0.2, 16.0.3, 17.0.2, 18.0.1, 19.0.1)
Oracle Retail Applications / Xenvironment (Apache Log4j) (15.0.4, 16.0.6, 17.0.4, 18.0.3, 19.0.2)
Oracle Siebel CRM / EAI (Apache Log4j) (21.2 and prior)
Oracle Critical Patch Update January 2021 ↗ CPU 2021-Q1 Oracle Fusion Middleware / Application Adapters (Apache Log4j) (19.1.0.0.0)
Oracle Fusion Middleware / Install, config, upgrade (Apache Log4j) (12.2.1.3.0, 12.2.1.4.0)
Oracle Health Sciences Applications / Recordlocator, DSUB (Apache Log4j) (3.0.1)
Oracle Retail Applications / Promotions (Apache Log4j) (16.0, 17.0, 18.0, 19.0)
Oracle Systems / Software (Apache Log4j) (2.3.1)
Oracle Critical Patch Update October 2020 ↗ CPU 2020-Q4 Oracle Communications / Media Control UI (Apache Log4j) (7)
Oracle Communications / WS and WEB (Apache Log4j) (3.9m0p1)
Oracle Communications Applications / Billing Operation Center and Oracle Communication Billing Care (Apache Log4j) (7.5.0.23.0, 12.0.0.3.0)
Oracle Communications Applications / Core (Apache Log4j) (12.0.0.3.0)
Oracle Communications Applications / Core (Apache Log4j) (7.3.0, 7.4.0)
Oracle Construction and Engineering / Core (Apache Log4j) (18.8, 19.12)
Oracle Enterprise Manager / PSEM Plugin (Apache Log4j) (13.4.1.1)
Oracle Financial Services Applications / Core (Apache Log4j) (12.0.0, 12.1.0)
Oracle Financial Services Applications / Core (Apache Log4j) (5.2.0, 11.5.0-11.7.0)
Oracle Financial Services Applications / Infrastructure (Apache Log4j) (8.0.6-8.1.0)
Oracle Financial Services Applications / Infrastructure (Apache log4j) (8.0.6, 8.0.8, 8.1.0)
Oracle Financial Services Applications / User Interface (Apache Log4j) (8.0.6)
Oracle Financial Services Applications / User Interface (Apache Log4j) (8.0.6, 8.0.7)
Oracle Financial Services Applications / User Interface (Apache Log4j) (8.0.6, 8.7.0, 8.1.0)
Oracle Fusion Middleware / Core (Apache Log4j) (10.3.6.0.0)
Oracle Insurance Applications / Architecture (Apache Log4j) (10.2.0.37, 10.2.4.12, 11.0.2.25, 11.1.0.15, 11.2.0.26)
Oracle Insurance Applications / Architecture (Apache Log4j) (10.2.0.37, 10.2.4.12, 11.0.2.25, 11.1.0.15, 11.2.0.26)
Oracle Insurance Applications / Framework Administrator IBFA (Apache Log4j) (5.0.0.0 - 5.6.0.0, 5.6.1.0)
Oracle PeopleSoft / Tools Admin API (Apache Log4j) (8.56, 8.57, 8.58)
Oracle PeopleSoft / Updates Environment Mgmt (Apache Log4j) (8.56, 8.57, 8.58)
Oracle Policy Automation / Core (Apache Log4j) (10.4.6)
Oracle Policy Automation / Core (Apache Log4j) (12.2.0 - 12.2.20)
Oracle Policy Automation / Core (Apache Log4j) (12.2.0 - 12.2.20)
Oracle Retail Applications / AIP Dashboard (Apache Log4j) (14.1)
Oracle Retail Applications / Application Core (Apache Log4j) (15.0.3.0, 16.0.3.0)
Oracle Retail Applications / BDI Job Scheduler (Apache Log4j) (15.0.3.0, 16.0.3.0)
Oracle Retail Applications / RIB Kernal (Apache Log4j) (14.1, 15.0, 16.0)
Oracle Retail Applications / RPAS Fusion Client (Apache Log4j) (14.1.3.0, 15.0.3.0, 16.0.3.0)
Oracle Retail Applications / Store Connect (Apache Log4j) (16.0, 18.0, 19.0, 19.1, 19.2, 19.3)
Oracle Utilities Applications / Common (Apache Log4j) (2.2.0.0.0, 4.2.0.2.0, 4.2.0.3.0, 4.3.0.1.0 - 4.3.0.6.0, 4.4.0.0.0, 4.4.0.2.0)
Oracle Critical Patch Update July 2020 ↗ CPU 2020-Q3 Oracle Communications Applications / API, FACE, Archiver (Log4j) (6.1-6.4)
Oracle Communications Applications / Installation (Log4j) (10.0.1.4.0)
Oracle Communications Applications / Notification Gateway (Log4j) (6.0.1, 12.0.0-12.0.3)
Oracle Construction and Engineering / Admin (Log4j) (16.2.0-16.2.11, 17.12.0-17.12.7, 18.8.0-18.8.9, 19.12.0-19.12.4)
Oracle Construction and Engineering / Logging (Log4j) (17.1-17.3)
Oracle Financial Services Applications / Collections (Log4j) (2.4.0-2.10.0)
Oracle Financial Services Applications / Infrastructure (Log4j) (12.1.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0)
Oracle Fusion Middleware / Install (Log4j) (12.2.1.3.0, 12.2.1.4.0)
Oracle Insurance Applications / Security (Log4j) (1.0)
Oracle JD Edwards / Installation SEC (Log4j) (Prior to 9.2.3.3)
Oracle JD Edwards / Monitoring and Diagnostics (Log4j) (Prior to 9.2.3.3)
Oracle Retail Applications / Knowledge Module (Log4j) (18.0)
Oracle Retail Applications / PeopleSoft Integration (Log4j) (15.0, 16.0)
Oracle Retail Applications / SIM Integration (Log4j) (14.0.4, 14.1.3, 15.0.3, 16.0.3)
Oracle Siebel CRM / Siebel Approval Manager (Log4j) (2.20.5 and prior)

Indexed Oracle Components & Versions

FamilyComponentOracle's version cell (verbatim)Indexed as
Oracle Communications Logging (Apache Log4j) 4.5 4.5
Oracle Communications Media Control UI (Apache Log4j) 7 7
Oracle Communications WS and WEB (Apache Log4j) 3.9m0p1 3.9.0.1
Oracle Communications Applications API, FACE, Archiver (Log4j) 6.1-6.4
Oracle Communications Applications Billing Operation Center and Oracle Communication Billing Care (Apache Log4j) 7.5.0.23.0, 12.0.0.3.0 7.5.0.23.0 · 12.0.0.3.0
Oracle Communications Applications Core (Apache Log4j) 7.3.0, 7.4.0 7.3.0 · 7.4.0 · 12.0.0.3.0
Oracle Communications Applications Installation (Log4j) 10.0.1.4.0 10.0.1.4.0
Oracle Communications Applications Notification Gateway (Log4j) 6.0.1, 12.0.0-12.0.3 6.0.1
Oracle Construction and Engineering Admin (Log4j) 16.2.0-16.2.11, 17.12.0-17.12.7, 18.8.0-18.8.9, 19.12.0-19.12.4
Oracle Construction and Engineering Core (Apache Log4j) 18.8, 19.12 18.8 · 19.12
Oracle Construction and Engineering Logging (Log4j) 17.1-17.3
Oracle Enterprise Manager PSEM Plugin (Apache Log4j) 13.4.1.1 13.4.1.1
Oracle Financial Services Applications Collections (Log4j) 2.4.0-2.10.0
Oracle Financial Services Applications Core (Apache Log4j) 5.2.0, 11.5.0-11.7.0 5.2.0 · 12.0.0 · 12.1.0
Oracle Financial Services Applications Infrastructure (Apache Log4j) 8.0.6-8.1.0
Oracle Financial Services Applications Infrastructure (Apache log4j) 8.0.6, 8.0.8, 8.1.0 8.0.6 · 8.0.8 · 8.1.0
Oracle Financial Services Applications Infrastructure (Log4j) 12.1.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0 12.1.0 · 12.3.0 · 12.4.0 · 14.0.0 · 14.1.0
Oracle Financial Services Applications User Interface (Apache Log4j) 8.0.6 8.0.6 · 8.0.7 · 8.1.0 · 8.7.0
Oracle Fusion Middleware Application Adapters (Apache Log4j) 19.1.0.0.0 19.1.0.0.0
Oracle Fusion Middleware Core (Apache Log4j) 10.3.6.0.0 10.3.6.0.0
Oracle Fusion Middleware Install (Log4j) 12.2.1.3.0, 12.2.1.4.0 12.2.1.3.0 · 12.2.1.4.0
Oracle Fusion Middleware Install, config, upgrade (Apache Log4j) 12.2.1.3.0, 12.2.1.4.0 12.2.1.3.0 · 12.2.1.4.0
Oracle Health Sciences Applications Recordlocator, DSUB (Apache Log4j) 3.0.1 3.0.1
Oracle Insurance Applications Architecture (Apache Log4j) 10.2.0.37, 10.2.4.12, 11.0.2.25, 11.1.0.15, 11.2.0.26 10.2.0.37 · 10.2.4.12 · 11.0.2.25 · 11.1.0.15 · 11.2.0.26
Oracle Insurance Applications Framework Administrator IBFA (Apache Log4j) 5.0.0.0 - 5.6.0.0, 5.6.1.0 5.6.1.0
Oracle Insurance Applications Security (Log4j) 1.0 1.0
Oracle JD Edwards Installation SEC (Log4j) Prior to 9.2.3.3
Oracle JD Edwards Monitoring and Diagnostics (Log4j) Prior to 9.2.3.3
Oracle JD Edwards World Software Security (Apache Log4j) A9.4
Oracle PeopleSoft Tools Admin API (Apache Log4j) 8.56, 8.57, 8.58 8.56 · 8.57 · 8.58
Oracle PeopleSoft Updates Environment Mgmt (Apache Log4j) 8.56, 8.57, 8.58 8.56 · 8.57 · 8.58
Oracle Policy Automation Core (Apache Log4j) 12.2.0 - 12.2.20 10.4.6
Oracle Retail Applications AIP Dashboard (Apache Log4j) 14.1 14.1
Oracle Retail Applications Application Core (Apache Log4j) 15.0.3.0, 16.0.3.0 15.0.3.0 · 16.0.3.0
Oracle Retail Applications BDI Job Scheduler (Apache Log4j) 15.0.3.0, 16.0.3.0 15.0.3.0 · 16.0.3.0
Oracle Retail Applications Knowledge Module (Log4j) 18.0 18.0
Oracle Retail Applications OBIEE - Metadata (Apache Log4j) 19.0 19.0
Oracle Retail Applications PeopleSoft Integration (Log4j) 15.0, 16.0 15.0 · 16.0
Oracle Retail Applications Promotions (Apache Log4j) 16.0, 17.0, 18.0, 19.0 16.0 · 17.0 · 18.0 · 19.0
Oracle Retail Applications RIB Kernal (Apache Log4j) 14.1, 15.0, 16.0 14.1 · 15.0 · 16.0
Oracle Retail Applications RPAS Fusion Client (Apache Log4j) 14.1.3.0, 15.0.3.0, 16.0.3.0 14.1.3.0 · 15.0.3.0 · 16.0.3.0
Oracle Retail Applications SIM Integration (Log4j) 14.0.4, 14.1.3, 15.0.3, 16.0.3 14.0.4 · 14.1.3 · 15.0.3 · 16.0.3
Oracle Retail Applications Store Connect (Apache Log4j) 16.0, 18.0, 19.0, 19.1, 19.2, 19.3 16.0 · 18.0 · 19.0 · 19.1 · 19.2 · 19.3
Oracle Retail Applications Unified Payments (Apache Log4j) 15.0.2, 16.0.3, 17.0.2, 18.0.1, 19.0.1 15.0.2 · 16.0.3 · 17.0.2 · 18.0.1 · 19.0.1
Oracle Retail Applications Xenvironment (Apache Log4j) 15.0.4, 16.0.6, 17.0.4, 18.0.3, 19.0.2 15.0.4 · 16.0.6 · 17.0.4 · 18.0.3 · 19.0.2
Oracle Siebel CRM EAI (Apache Log4j) 21.2 and prior
Oracle Siebel CRM Marketing (Apache Log4j) 21.9 and prior
Oracle Siebel CRM Siebel Approval Manager (Log4j) 2.20.5 and prior
Oracle Systems Software (Apache Log4j) 2.3.1 2.3.1 · 8.5.1
Oracle Utilities Applications Common (Apache Log4j) 2.2.0.0.0, 4.2.0.2.0, 4.2.0.3.0, 4.3.0.1.0 - 4.3.0.6.0, 4.4.0.0.0, 4.4.0.2.0 2.2.0.0.0 · 4.2.0.2.0 · 4.2.0.3.0 · 4.4.0.0.0 · 4.4.0.2.0

☕ Maven Library Packages

Artifact coordinates and fix boundaries from OSV.dev
Package CoordinateIntroducedFixedLast affected
org.apache.logging.log4j:log4j 2.13.0 2.13.2 unbounded
org.apache.logging.log4j:log4j-core 2.13.0 2.13.2 unbounded
org.apache.logging.log4j:log4j 2.4.0 2.12.3 unbounded
org.apache.logging.log4j:log4j 0 2.3.2 unbounded
org.apache.logging.log4j:log4j-core 2.4.0 2.12.3 unbounded
org.apache.logging.log4j:log4j-core 0 2.3.2 unbounded

🖥️ Product CPEs & Version Ranges

48 product(s) over 107 version claims (uncapped)
SourceVendorProductSchemeAffected Versions
nvd apache log4j generic ≥ 2.0 and ＜ 2.3.2 · ≥ 2.4 and ＜ 2.12.3 · ≥ 2.13.0 and ＜ 2.13.2
nvd debian debian linux generic 9.0 · 10.0 · 11.0
nvd oracle communications application session controller generic 3.9m0p1
nvd oracle communications billing and revenue management generic 7.5.0.23.0 · 12.0.0.3.0
nvd oracle communications eagle ftp table base retrieval generic 4.5
nvd oracle communications offline mediation controller generic 12.0.0.3.0
nvd oracle communications services gatekeeper generic 7.0
nvd oracle communications unified inventory management generic 7.3.0 · 7.4.0
nvd oracle data integrator generic 12.2.1.3.0 · 12.2.1.4.0
nvd oracle enterprise manager for peoplesoft generic 13.4.1.1
nvd oracle financial services analytical applications infrastructure generic ≥ 8.0.6.0.0 and ≤ 8.1.0.0.0
nvd oracle financial services institutional performance analytics generic 8.0.6 · 8.1.0 · 8.7.0
nvd oracle financial services market risk measurement and management generic 8.0.6 · 8.0.8 · 8.1.0
nvd oracle financial services price creation and discovery generic 8.0.6 · 8.0.7
nvd oracle financial services retail customer analytics generic 8.0.6
nvd oracle flexcube core banking generic 5.2.0 · ≥ 11.5.0 and ≤ 11.7.0
nvd oracle flexcube private banking generic 12.0.0 · 12.1.0
nvd oracle health sciences information manager generic 3.0.1
nvd oracle insurance insbridge rating and underwriting generic ≥ 5.0.0.0 and ≤ 5.6.0.0 · 5.6.1.0
nvd oracle insurance policy administration j2ee generic 10.2.0.37 · 10.2.4.12 · 11.0.2.25 · 11.1.0.15 · 11.2.0.26
nvd oracle insurance rules palette generic 10.2.0.37 · 10.2.4.12 · 11.0.2.25 · 11.1.0.15 · 11.2.0.26
nvd oracle jd edwards world security generic a9.4
nvd oracle oracle goldengate application adapters generic 19.1.0.0.0
nvd oracle peoplesoft enterprise peopletools generic 8.56 · 8.57 · 8.58
nvd oracle policy automation generic ≥ 12.2.0 and ≤ 12.2.20
nvd oracle policy automation connector for siebel generic 10.4.6
nvd oracle policy automation for mobile devices generic ≥ 12.2.0 and ≤ 12.2.20
nvd oracle primavera unifier generic 18.8 · 19.12
nvd oracle retail advanced inventory planning generic 14.1
nvd oracle retail assortment planning generic 15.0.3.0 · 16.0.3.0
nvd oracle retail bulk data integration generic 15.0.3.0 · 16.0.3.0
nvd oracle retail customer management and segmentation foundation generic 16.0 · 17.0 · 18.0 · 19.0
nvd oracle retail eftlink generic 15.0.2 · 16.0.3 · 17.0.2 · 18.0.1 · 19.0.1
nvd oracle retail insights cloud service suite generic 19.0
nvd oracle retail integration bus generic 14.1 · 15.0 · 16.0
nvd oracle retail order broker cloud service generic 16.0 · 18.0 · 19.0 · 19.1 · 19.2 · 19.3
nvd oracle retail predictive application server generic 14.1.3.0 · 15.0.3.0 · 16.0.3.0
nvd oracle retail xstore point of service generic 15.0.4 · 16.0.6 · 17.0.4 · 18.0.3 · 19.0.2
nvd oracle siebel apps - marketing generic ≤ 21.9
nvd oracle siebel ui framework generic ≤ 21.2
nvd oracle spatial and graph generic 12.2.0.1 · 18c · 19c
nvd oracle storagetek acsls generic 8.5.1
nvd oracle storagetek tape analytics sw tool generic 2.3.1
nvd oracle utilities framework generic 2.2.0.0.0 · 4.2.0.2.0 · 4.2.0.3.0 · ≥ 4.3.0.1.0 and ≤ 4.3.0.6.0 · 4.4.0.0.0 · 4.4.0.2.0
nvd oracle weblogic server generic 10.3.6.0.0
osv org.apache.logging.log4j log4j generic ＜ 2.3.2 · ≥ 2.4.0 and ＜ 2.12.3 · ≥ 2.13.0 and ＜ 2.13.2
osv org.apache.logging.log4j log4j-core generic ＜ 2.3.2 · ≥ 2.4.0 and ＜ 2.12.3 · ≥ 2.13.0 and ＜ 2.13.2
nvd qos reload4j generic ＜ 1.2.18.3

Manual classification context

A reviewer manually classified this CVE. The retained record includes the labels and products below, but not the reviewer's reasoning.

## Manual Classification Context **Labels:** SECURITY (LOG4J), ARCHITECTURE (APACHE LOG4J), INSTALLATION (LOG4J), WS AND WEB (APACHE LOG4J), INFRASTRUCTURE (LOG4J), SIM INTEGRATION (LOG4J), EAI (APACHE LOG4J), WORLD SOFTWARE SECURITY (APACHE LOG4J), INFRASTRUCTURE (APACHE LOG4J), HTTP, XENVIRONMENT (APACHE LOG4J), SOFTWARE (APACHE LOG4J), INSTALL, USER INTERFACE (APACHE LOG4J), SIEBEL APPROVAL MANAGER (LOG4J), COMMON (APACHE LOG4J), LOGGING (LOG4J), BDI JOB SCHEDULER (APACHE LOG4J), RIB KERNAL (APACHE LOG4J), KNOWLEDGE MODULE (LOG4J), CONFIG, DSUB (APACHE LOG4J), APPLICATION CORE (APACHE LOG4J), PSEM PLUGIN (APACHE LOG4J), FRAMEWORK ADMINISTRATOR IBFA (APACHE LOG4J), RECORDLOCATOR, FACE, ADMIN (LOG4J), NO AUTH REMOTE EXPLOIT, PEOPLESOFT INTEGRATION (LOG4J), API, APPLICATION ADAPTERS (APACHE LOG4J), BILLING OPERATION CENTER AND ORACLE COMMUNICATION BILLING CARE (APACHE LOG4J), NOTIFICATION GATEWAY (LOG4J), RPAS FUSION CLIENT (APACHE LOG4J), UNIFIED PAYMENTS (APACHE LOG4J), INSTALL (LOG4J), INSTALLATION SEC (LOG4J), AIP DASHBOARD (APACHE LOG4J), ARCHIVER (LOG4J), MEDIA CONTROL UI (APACHE LOG4J), OBIEE - METADATA (APACHE LOG4J), TOOLS ADMIN API (APACHE LOG4J), COLLECTIONS (LOG4J), PROMOTIONS (APACHE LOG4J), UPGRADE (APACHE LOG4J), MONITORING AND DIAGNOSTICS (LOG4J), SMTPS, CORE (APACHE LOG4J), STORE CONNECT (APACHE LOG4J), UPDATES ENVIRONMENT MGMT (APACHE LOG4J), LOGGING (APACHE LOG4J), MARKETING (APACHE LOG4J) **Products:** PRIMAVERA UNIFIER, ORACLE ENTERPRISE MANAGER, ENTERPRISE MANAGER FOR PEOPLESOFT, ORACLE FLEXCUBE CORE BANKING, ORACLE DATA INTEGRATOR, ORACLE RETAIL ASSORTMENT PLANNING, ORACLE UTILITIES FRAMEWORK, ORACLE POLICY AUTOMATION FOR MOBILE DEVICES, SIEBEL UI FRAMEWORK, ORACLE RETAIL FINANCIAL INTEGRATION, ORACLE FINANCIAL SERVICES APPLICATIONS, ORACLE COMMUNICATIONS INSTANT MESSAGING SERVER, ORACLE RETAIL EFTLINK, ORACLE RETAIL BULK DATA INTEGRATION, ORACLE INSURANCE POLICY ADMINISTRATION J2EE, ORACLE FINANCIAL SERVICES ANALYTICAL APPLICATIONS INFRASTRUCTURE, ORACLE RETAIL STORE INVENTORY MANAGEMENT, STORAGETEK TAPE ANALYTICS SW TOOL, ORACLE CONSTRUCTION AND ENGINEERING, ORACLE JD EDWARDS, LOG4J, ORACLE COMMUNICATIONS APPLICATION SESSION CONTROLLER, ORACLE INSURANCE APPLICATIONS, ORACLE FINANCIAL SERVICES RETAIL CUSTOMER ANALYTICS, ORACLE RETAIL CUSTOMER MANAGEMENT AND SEGMENTATION FOUNDATION, ORACLE FLEXCUBE PRIVATE BANKING, ORACLE FLEXCUBE INVESTOR SERVICING, ORACLE COMMUNICATIONS NETWORK CHARGING AND CONTROL, ORACLE COMMUNICATIONS INTERACTIVE SESSION RECORDER, ORACLE INSURANCE DATA GATEWAY, ORACLE SIEBEL CRM, ORACLE FUSION MIDDLEWARE, ORACLE RETAIL INTEGRATION BUS, ORACLE COMMUNICATIONS BILLING AND REVENUE MANAGEMENT, ORACLE FINANCIAL SERVICES MARKET RISK MEASUREMENT AND MANAGEMENT, ORACLE INSURANCE INSBRIDGE RATING AND UNDERWRITING, ORACLE RETAIL ADVANCED INVENTORY PLANNING, ORACLE FUSION MIDDLEWARE MAPVIEWER, ORACLE COMMUNICATIONS APPLICATIONS, JD EDWARDS WORLD SECURITY, ORACLE UTILITIES APPLICATIONS, ORACLE HEALTH SCIENCES APPLICATIONS, ORACLE RETAIL INSIGHTS CLOUD SERVICE SUITE, ORACLE BANKING PLATFORM, ORACLE FINANCIAL SERVICES PRICE CREATION AND DISCOVERY, ORACLE RETAIL PREDICTIVE APPLICATION SERVER, SIEBEL ENGINEERING - INSTALLER & DEPLOYMENT, ORACLE PEOPLESOFT, ORACLE RETAIL APPLICATIONS, ORACLE COMMUNICATIONS OFFLINE MEDIATION CONTROLLER, ORACLE WEBLOGIC SERVER, ORACLE POLICY AUTOMATION CONNECTOR FOR SIEBEL, PRIMAVERA GATEWAY, ORACLE HEALTH SCIENCES INFORMATION MANAGER, ORACLE RETAIL XSTORE POINT OF SERVICE, ORACLE COMMUNICATIONS, ORACLE COMMUNICATIONS SERVICES GATEKEEPER, ORACLE POLICY AUTOMATION, ORACLE SYSTEMS, INSTANTIS ENTERPRISETRACK, ORACLE COMMUNICATIONS UNIFIED INVENTORY MANAGEMENT, ORACLE RETAIL ORDER BROKER, ORACLE INSURANCE RULES PALETTE, ORACLE FINANCIAL SERVICES INSTITUTIONAL PERFORMANCE ANALYTICS, ORACLE GOLDENGATE APPLICATION ADAPTERS, PEOPLESOFT ENTERPRISE PEOPLETOOLS, JD EDWARDS ENTERPRISEONE TOOLS, ORACLE RETAIL DATA EXTRACTOR FOR MERCHANDISING, ORACLE COMMUNICATIONS EAGLE FTP TABLE BASE RETRIEVAL, SIEBEL APPS - MARKETING

References

URLTags
https://lists.apache.org/thread.html/rd55f65c6822ff235eda435d31488cfbb9aa7055cdf47481ebee777cc%40%3Cissues.zookeeper.apache.org%3E WEB
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E WEB
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E WEB
https://lists.apache.org/thread.html/rc6b81c013618d1de1b5d6b8c1088aaf87b4bacc10c2371f15a566701@%3Cnotifications.zookeeper.apache.org%3E WEB
https://lists.apache.org/thread.html/rc6b81c013618d1de1b5d6b8c1088aaf87b4bacc10c2371f15a566701%40%3Cnotifications.zookeeper.apache.org%3E WEB
https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a@%3Ctorque-dev.db.apache.org%3E WEB
https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a%40%3Ctorque-dev.db.apache.org%3E WEB
https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3@%3Ctorque-dev.db.apache.org%3E WEB
https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3%40%3Ctorque-dev.db.apache.org%3E WEB
https://lists.apache.org/thread.html/rbc45eb0f53fd6242af3e666c2189464f848a851d408289840cecc6e3@%3Ccommits.zookeeper.apache.org%3E WEB

Timeline

Published 2020-04-27 Last modified 2026-06-17
Published2020-04-27By the CVE Program.
NVD record modified2026-06-17NVD's own last-modified date for this record.