WaratekVRT Sign in

CVE-2020-9488 Apache Log4j

Affected softwareApache Log4j
Severity3.7 Low CVSS 3.1 3 scores
Fixed in2.13.2, 2.12.3, 2.3.2
WeaknessCWE-295
Published27 Apr 2020
Updated17 Jun 2026

Description

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1

Exploitation status

No public exploit

No exploit has been reported in the sources we check. The 1 repository below are public GitHub repositories with fewer than 5 stars.
  • CISA KEV not listed
  • VulnCheck KEV not listed
  • CISA Vulnrichment exploitation: none
  • Indexed PoC 1 indexed, none at 5+ stars
  • EPSS 8.2% chance in 30 days

1 of these are GitHub repositories with fewer than 5 stars. They are listed for reference and don't count toward the exploitation status above.

IndexArtifactStarsFirst seen
GitHub PoC Demo of CVE-2020-9488: Unsafe logging with Log4j and remediation 2025-07-07

Waratek protection

Outside Waratek scope

A Java vulnerability, but not one Waratek protects. It affects only Java on a user's desktop (applets, Web Start, JavaFX, the installer), sits in a product the Waratek agent can't be installed into, or is in a package we don't expect in business applications. The decision below says which.

  • Protection none
  • Action not pursued none
  • Review human Researcher
  • Record active
Decided by Manual classification of this CVE in the legacy dataset
Finding A manual classification set this CVE's status to Outside Waratek scope, but the CVE names a tracked product.

CVSS

3.7 LOW v3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 3 metrics

We show the highest score from the newest CVSS version. Scores from different versions can't be compared, and the first score listed is sometimes a 0.0 placeholder.

VersionScoreBandVectorAssignerType
CVSS 3.1 3.7 LOW CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N NVD Primary published
CVSS 3.1 3.7 LOW CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CISA-ADP Secondary
CVSS 2.0 4.3 none AV:N/AC:M/Au:N/C:P/I:N/A:N NVD Primary

Affected software and releases

Oracle advisories

AdvisoryTypeQuarterProducts Oracle names in its risk matrix
Oracle Critical Patch Update April 2022 ↗ CPU 2022-Q2 Oracle Systems / Software (Apache Log4j) (8.5.1)
Oracle Critical Patch Update October 2021 ↗ CPU 2021-Q4 Oracle Communications / Logging (Apache Log4j) (4.5)
Oracle Siebel CRM / Marketing (Apache Log4j) (21.9 and prior)
Oracle Critical Patch Update April 2021 ↗ CPU 2021-Q2 Oracle JD Edwards / World Software Security (Apache Log4j) (A9.4)
Oracle Retail Applications / OBIEE - Metadata (Apache Log4j) (19.0)
Oracle Retail Applications / Unified Payments (Apache Log4j) (15.0.2, 16.0.3, 17.0.2, 18.0.1, 19.0.1)
Oracle Retail Applications / Xenvironment (Apache Log4j) (15.0.4, 16.0.6, 17.0.4, 18.0.3, 19.0.2)
Oracle Siebel CRM / EAI (Apache Log4j) (21.2 and prior)
Oracle Critical Patch Update January 2021 ↗ CPU 2021-Q1 Oracle Fusion Middleware / Application Adapters (Apache Log4j) (19.1.0.0.0)
Oracle Fusion Middleware / Install, config, upgrade (Apache Log4j) (12.2.1.3.0, 12.2.1.4.0)
Oracle Health Sciences Applications / Recordlocator, DSUB (Apache Log4j) (3.0.1)
Oracle Retail Applications / Promotions (Apache Log4j) (16.0, 17.0, 18.0, 19.0)
Oracle Systems / Software (Apache Log4j) (2.3.1)
Oracle Critical Patch Update October 2020 ↗ CPU 2020-Q4 Oracle Communications / Media Control UI (Apache Log4j) (7)
Oracle Communications / WS and WEB (Apache Log4j) (3.9m0p1)
Oracle Communications Applications / Billing Operation Center and Oracle Communication Billing Care (Apache Log4j) (7.5.0.23.0, 12.0.0.3.0)
Oracle Communications Applications / Core (Apache Log4j) (12.0.0.3.0)
Oracle Communications Applications / Core (Apache Log4j) (7.3.0, 7.4.0)
Oracle Construction and Engineering / Core (Apache Log4j) (18.8, 19.12)
Oracle Enterprise Manager / PSEM Plugin (Apache Log4j) (13.4.1.1)
Oracle Financial Services Applications / Core (Apache Log4j) (12.0.0, 12.1.0)
Oracle Financial Services Applications / Core (Apache Log4j) (5.2.0, 11.5.0-11.7.0)
Oracle Financial Services Applications / Infrastructure (Apache Log4j) (8.0.6-8.1.0)
Oracle Financial Services Applications / Infrastructure (Apache log4j) (8.0.6, 8.0.8, 8.1.0)
Oracle Financial Services Applications / User Interface (Apache Log4j) (8.0.6)
Oracle Financial Services Applications / User Interface (Apache Log4j) (8.0.6, 8.0.7)
Oracle Financial Services Applications / User Interface (Apache Log4j) (8.0.6, 8.7.0, 8.1.0)
Oracle Fusion Middleware / Core (Apache Log4j) (10.3.6.0.0)
Oracle Insurance Applications / Architecture (Apache Log4j) (10.2.0.37, 10.2.4.12, 11.0.2.25, 11.1.0.15, 11.2.0.26)
Oracle Insurance Applications / Architecture (Apache Log4j) (10.2.0.37, 10.2.4.12, 11.0.2.25, 11.1.0.15, 11.2.0.26)
Oracle Insurance Applications / Framework Administrator IBFA (Apache Log4j) (5.0.0.0 - 5.6.0.0, 5.6.1.0)
Oracle PeopleSoft / Tools Admin API (Apache Log4j) (8.56, 8.57, 8.58)
Oracle PeopleSoft / Updates Environment Mgmt (Apache Log4j) (8.56, 8.57, 8.58)
Oracle Policy Automation / Core (Apache Log4j) (10.4.6)
Oracle Policy Automation / Core (Apache Log4j) (12.2.0 - 12.2.20)
Oracle Policy Automation / Core (Apache Log4j) (12.2.0 - 12.2.20)
Oracle Retail Applications / AIP Dashboard (Apache Log4j) (14.1)
Oracle Retail Applications / Application Core (Apache Log4j) (15.0.3.0, 16.0.3.0)
Oracle Retail Applications / BDI Job Scheduler (Apache Log4j) (15.0.3.0, 16.0.3.0)
Oracle Retail Applications / RIB Kernal (Apache Log4j) (14.1, 15.0, 16.0)
Oracle Retail Applications / RPAS Fusion Client (Apache Log4j) (14.1.3.0, 15.0.3.0, 16.0.3.0)
Oracle Retail Applications / Store Connect (Apache Log4j) (16.0, 18.0, 19.0, 19.1, 19.2, 19.3)
Oracle Utilities Applications / Common (Apache Log4j) (2.2.0.0.0, 4.2.0.2.0, 4.2.0.3.0, 4.3.0.1.0 - 4.3.0.6.0, 4.4.0.0.0, 4.4.0.2.0)
Oracle Critical Patch Update July 2020 ↗ CPU 2020-Q3 Oracle Communications Applications / API, FACE, Archiver (Log4j) (6.1-6.4)
Oracle Communications Applications / Installation (Log4j) (10.0.1.4.0)
Oracle Communications Applications / Notification Gateway (Log4j) (6.0.1, 12.0.0-12.0.3)
Oracle Construction and Engineering / Admin (Log4j) (16.2.0-16.2.11, 17.12.0-17.12.7, 18.8.0-18.8.9, 19.12.0-19.12.4)
Oracle Construction and Engineering / Logging (Log4j) (17.1-17.3)
Oracle Financial Services Applications / Collections (Log4j) (2.4.0-2.10.0)
Oracle Financial Services Applications / Infrastructure (Log4j) (12.1.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0)
Oracle Fusion Middleware / Install (Log4j) (12.2.1.3.0, 12.2.1.4.0)
Oracle Insurance Applications / Security (Log4j) (1.0)
Oracle JD Edwards / Installation SEC (Log4j) (Prior to 9.2.3.3)
Oracle JD Edwards / Monitoring and Diagnostics (Log4j) (Prior to 9.2.3.3)
Oracle Retail Applications / Knowledge Module (Log4j) (18.0)
Oracle Retail Applications / PeopleSoft Integration (Log4j) (15.0, 16.0)
Oracle Retail Applications / SIM Integration (Log4j) (14.0.4, 14.1.3, 15.0.3, 16.0.3)
Oracle Siebel CRM / Siebel Approval Manager (Log4j) (2.20.5 and prior)

Oracle components and versions

FamilyComponentVersions, as Oracle lists themRead as
Oracle Communications Logging (Apache Log4j) 4.5 4.5
Oracle Communications Media Control UI (Apache Log4j) 7 7
Oracle Communications WS and WEB (Apache Log4j) 3.9m0p1 3.9.0.1
Oracle Communications Applications API, FACE, Archiver (Log4j) 6.1-6.4
Oracle Communications Applications Billing Operation Center and Oracle Communication Billing Care (Apache Log4j) 7.5.0.23.0, 12.0.0.3.0 7.5.0.23.0 · 12.0.0.3.0
Oracle Communications Applications Core (Apache Log4j) 7.3.0, 7.4.0 7.3.0 · 7.4.0 · 12.0.0.3.0
Oracle Communications Applications Installation (Log4j) 10.0.1.4.0 10.0.1.4.0
Oracle Communications Applications Notification Gateway (Log4j) 6.0.1, 12.0.0-12.0.3 6.0.1
Oracle Construction and Engineering Admin (Log4j) 16.2.0-16.2.11, 17.12.0-17.12.7, 18.8.0-18.8.9, 19.12.0-19.12.4
Oracle Construction and Engineering Core (Apache Log4j) 18.8, 19.12 18.8 · 19.12
Oracle Construction and Engineering Logging (Log4j) 17.1-17.3
Oracle Enterprise Manager PSEM Plugin (Apache Log4j) 13.4.1.1 13.4.1.1
Oracle Financial Services Applications Collections (Log4j) 2.4.0-2.10.0
Oracle Financial Services Applications Core (Apache Log4j) 5.2.0, 11.5.0-11.7.0 5.2.0 · 12.0.0 · 12.1.0
Oracle Financial Services Applications Infrastructure (Apache Log4j) 8.0.6-8.1.0
Oracle Financial Services Applications Infrastructure (Apache log4j) 8.0.6, 8.0.8, 8.1.0 8.0.6 · 8.0.8 · 8.1.0
Oracle Financial Services Applications Infrastructure (Log4j) 12.1.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0 12.1.0 · 12.3.0 · 12.4.0 · 14.0.0 · 14.1.0
Oracle Financial Services Applications User Interface (Apache Log4j) 8.0.6 8.0.6 · 8.0.7 · 8.1.0 · 8.7.0
Oracle Fusion Middleware Application Adapters (Apache Log4j) 19.1.0.0.0 19.1.0.0.0
Oracle Fusion Middleware Core (Apache Log4j) 10.3.6.0.0 10.3.6.0.0
Oracle Fusion Middleware Install (Log4j) 12.2.1.3.0, 12.2.1.4.0 12.2.1.3.0 · 12.2.1.4.0
Oracle Fusion Middleware Install, config, upgrade (Apache Log4j) 12.2.1.3.0, 12.2.1.4.0 12.2.1.3.0 · 12.2.1.4.0
Oracle Health Sciences Applications Recordlocator, DSUB (Apache Log4j) 3.0.1 3.0.1
Oracle Insurance Applications Architecture (Apache Log4j) 10.2.0.37, 10.2.4.12, 11.0.2.25, 11.1.0.15, 11.2.0.26 10.2.0.37 · 10.2.4.12 · 11.0.2.25 · 11.1.0.15 · 11.2.0.26
Oracle Insurance Applications Framework Administrator IBFA (Apache Log4j) 5.0.0.0 - 5.6.0.0, 5.6.1.0 5.6.1.0
Oracle Insurance Applications Security (Log4j) 1.0 1.0
Oracle JD Edwards Installation SEC (Log4j) Prior to 9.2.3.3
Oracle JD Edwards Monitoring and Diagnostics (Log4j) Prior to 9.2.3.3
Oracle JD Edwards World Software Security (Apache Log4j) A9.4
Oracle PeopleSoft Tools Admin API (Apache Log4j) 8.56, 8.57, 8.58 8.56 · 8.57 · 8.58
Oracle PeopleSoft Updates Environment Mgmt (Apache Log4j) 8.56, 8.57, 8.58 8.56 · 8.57 · 8.58
Oracle Policy Automation Core (Apache Log4j) 12.2.0 - 12.2.20 10.4.6
Oracle Retail Applications AIP Dashboard (Apache Log4j) 14.1 14.1
Oracle Retail Applications Application Core (Apache Log4j) 15.0.3.0, 16.0.3.0 15.0.3.0 · 16.0.3.0
Oracle Retail Applications BDI Job Scheduler (Apache Log4j) 15.0.3.0, 16.0.3.0 15.0.3.0 · 16.0.3.0
Oracle Retail Applications Knowledge Module (Log4j) 18.0 18.0
Oracle Retail Applications OBIEE - Metadata (Apache Log4j) 19.0 19.0
Oracle Retail Applications PeopleSoft Integration (Log4j) 15.0, 16.0 15.0 · 16.0
Oracle Retail Applications Promotions (Apache Log4j) 16.0, 17.0, 18.0, 19.0 16.0 · 17.0 · 18.0 · 19.0
Oracle Retail Applications RIB Kernal (Apache Log4j) 14.1, 15.0, 16.0 14.1 · 15.0 · 16.0
Oracle Retail Applications RPAS Fusion Client (Apache Log4j) 14.1.3.0, 15.0.3.0, 16.0.3.0 14.1.3.0 · 15.0.3.0 · 16.0.3.0
Oracle Retail Applications SIM Integration (Log4j) 14.0.4, 14.1.3, 15.0.3, 16.0.3 14.0.4 · 14.1.3 · 15.0.3 · 16.0.3
Oracle Retail Applications Store Connect (Apache Log4j) 16.0, 18.0, 19.0, 19.1, 19.2, 19.3 16.0 · 18.0 · 19.0 · 19.1 · 19.2 · 19.3
Oracle Retail Applications Unified Payments (Apache Log4j) 15.0.2, 16.0.3, 17.0.2, 18.0.1, 19.0.1 15.0.2 · 16.0.3 · 17.0.2 · 18.0.1 · 19.0.1
Oracle Retail Applications Xenvironment (Apache Log4j) 15.0.4, 16.0.6, 17.0.4, 18.0.3, 19.0.2 15.0.4 · 16.0.6 · 17.0.4 · 18.0.3 · 19.0.2
Oracle Siebel CRM EAI (Apache Log4j) 21.2 and prior
Oracle Siebel CRM Marketing (Apache Log4j) 21.9 and prior
Oracle Siebel CRM Siebel Approval Manager (Log4j) 2.20.5 and prior
Oracle Systems Software (Apache Log4j) 2.3.1 2.3.1 · 8.5.1
Oracle Utilities Applications Common (Apache Log4j) 2.2.0.0.0, 4.2.0.2.0, 4.2.0.3.0, 4.3.0.1.0 - 4.3.0.6.0, 4.4.0.0.0, 4.4.0.2.0 2.2.0.0.0 · 4.2.0.2.0 · 4.2.0.3.0 · 4.4.0.0.0 · 4.4.0.2.0

Maven packages

Affected and fixed versions, from OSV.dev
PackageIntroducedFixedLast affected
org.apache.logging.log4j:log4j 2.13.0 2.13.2 unbounded
org.apache.logging.log4j:log4j-core 2.13.0 2.13.2 unbounded
org.apache.logging.log4j:log4j 2.4.0 2.12.3 unbounded
org.apache.logging.log4j:log4j 0 2.3.2 unbounded
org.apache.logging.log4j:log4j-core 2.4.0 2.12.3 unbounded
org.apache.logging.log4j:log4j-core 0 2.3.2 unbounded

Products and versions

48 products, 107 version entries
SourceVendorProductSchemeAffected versions
nvd apache log4j generic ≥ 2.0 and ＜ 2.3.2 · ≥ 2.4 and ＜ 2.12.3 · ≥ 2.13.0 and ＜ 2.13.2
nvd debian debian linux generic 9.0 · 10.0 · 11.0
nvd oracle communications application session controller generic 3.9m0p1
nvd oracle communications billing and revenue management generic 7.5.0.23.0 · 12.0.0.3.0
nvd oracle communications eagle ftp table base retrieval generic 4.5
nvd oracle communications offline mediation controller generic 12.0.0.3.0
nvd oracle communications services gatekeeper generic 7.0
nvd oracle communications unified inventory management generic 7.3.0 · 7.4.0
nvd oracle data integrator generic 12.2.1.3.0 · 12.2.1.4.0
nvd oracle enterprise manager for peoplesoft generic 13.4.1.1
nvd oracle financial services analytical applications infrastructure generic ≥ 8.0.6.0.0 and ≤ 8.1.0.0.0
nvd oracle financial services institutional performance analytics generic 8.0.6 · 8.1.0 · 8.7.0
nvd oracle financial services market risk measurement and management generic 8.0.6 · 8.0.8 · 8.1.0
nvd oracle financial services price creation and discovery generic 8.0.6 · 8.0.7
nvd oracle financial services retail customer analytics generic 8.0.6
nvd oracle flexcube core banking generic 5.2.0 · ≥ 11.5.0 and ≤ 11.7.0
nvd oracle flexcube private banking generic 12.0.0 · 12.1.0
nvd oracle health sciences information manager generic 3.0.1
nvd oracle insurance insbridge rating and underwriting generic ≥ 5.0.0.0 and ≤ 5.6.0.0 · 5.6.1.0
nvd oracle insurance policy administration j2ee generic 10.2.0.37 · 10.2.4.12 · 11.0.2.25 · 11.1.0.15 · 11.2.0.26
nvd oracle insurance rules palette generic 10.2.0.37 · 10.2.4.12 · 11.0.2.25 · 11.1.0.15 · 11.2.0.26
nvd oracle jd edwards world security generic a9.4
nvd oracle oracle goldengate application adapters generic 19.1.0.0.0
nvd oracle peoplesoft enterprise peopletools generic 8.56 · 8.57 · 8.58
nvd oracle policy automation generic ≥ 12.2.0 and ≤ 12.2.20
nvd oracle policy automation connector for siebel generic 10.4.6
nvd oracle policy automation for mobile devices generic ≥ 12.2.0 and ≤ 12.2.20
nvd oracle primavera unifier generic 18.8 · 19.12
nvd oracle retail advanced inventory planning generic 14.1
nvd oracle retail assortment planning generic 15.0.3.0 · 16.0.3.0
nvd oracle retail bulk data integration generic 15.0.3.0 · 16.0.3.0
nvd oracle retail customer management and segmentation foundation generic 16.0 · 17.0 · 18.0 · 19.0
nvd oracle retail eftlink generic 15.0.2 · 16.0.3 · 17.0.2 · 18.0.1 · 19.0.1
nvd oracle retail insights cloud service suite generic 19.0
nvd oracle retail integration bus generic 14.1 · 15.0 · 16.0
nvd oracle retail order broker cloud service generic 16.0 · 18.0 · 19.0 · 19.1 · 19.2 · 19.3
nvd oracle retail predictive application server generic 14.1.3.0 · 15.0.3.0 · 16.0.3.0
nvd oracle retail xstore point of service generic 15.0.4 · 16.0.6 · 17.0.4 · 18.0.3 · 19.0.2
nvd oracle siebel apps - marketing generic ≤ 21.9
nvd oracle siebel ui framework generic ≤ 21.2
nvd oracle spatial and graph generic 12.2.0.1 · 18c · 19c
nvd oracle storagetek acsls generic 8.5.1
nvd oracle storagetek tape analytics sw tool generic 2.3.1
nvd oracle utilities framework generic 2.2.0.0.0 · 4.2.0.2.0 · 4.2.0.3.0 · ≥ 4.3.0.1.0 and ≤ 4.3.0.6.0 · 4.4.0.0.0 · 4.4.0.2.0
nvd oracle weblogic server generic 10.3.6.0.0
osv org.apache.logging.log4j log4j generic ＜ 2.3.2 · ≥ 2.4.0 and ＜ 2.12.3 · ≥ 2.13.0 and ＜ 2.13.2
osv org.apache.logging.log4j log4j-core generic ＜ 2.3.2 · ≥ 2.4.0 and ＜ 2.12.3 · ≥ 2.13.0 and ＜ 2.13.2
nvd qos reload4j generic ＜ 1.2.18.3

Earlier manual review

A reviewer classified this CVE in an older dataset. We kept the labels and products below, but not the reviewer's reasoning.

## Manual Classification Context **Labels:** SECURITY (LOG4J), ARCHITECTURE (APACHE LOG4J), INSTALLATION (LOG4J), WS AND WEB (APACHE LOG4J), INFRASTRUCTURE (LOG4J), SIM INTEGRATION (LOG4J), EAI (APACHE LOG4J), WORLD SOFTWARE SECURITY (APACHE LOG4J), INFRASTRUCTURE (APACHE LOG4J), HTTP, XENVIRONMENT (APACHE LOG4J), SOFTWARE (APACHE LOG4J), INSTALL, USER INTERFACE (APACHE LOG4J), SIEBEL APPROVAL MANAGER (LOG4J), COMMON (APACHE LOG4J), LOGGING (LOG4J), BDI JOB SCHEDULER (APACHE LOG4J), RIB KERNAL (APACHE LOG4J), KNOWLEDGE MODULE (LOG4J), CONFIG, DSUB (APACHE LOG4J), APPLICATION CORE (APACHE LOG4J), PSEM PLUGIN (APACHE LOG4J), FRAMEWORK ADMINISTRATOR IBFA (APACHE LOG4J), RECORDLOCATOR, FACE, ADMIN (LOG4J), NO AUTH REMOTE EXPLOIT, PEOPLESOFT INTEGRATION (LOG4J), API, APPLICATION ADAPTERS (APACHE LOG4J), BILLING OPERATION CENTER AND ORACLE COMMUNICATION BILLING CARE (APACHE LOG4J), NOTIFICATION GATEWAY (LOG4J), RPAS FUSION CLIENT (APACHE LOG4J), UNIFIED PAYMENTS (APACHE LOG4J), INSTALL (LOG4J), INSTALLATION SEC (LOG4J), AIP DASHBOARD (APACHE LOG4J), ARCHIVER (LOG4J), MEDIA CONTROL UI (APACHE LOG4J), OBIEE - METADATA (APACHE LOG4J), TOOLS ADMIN API (APACHE LOG4J), COLLECTIONS (LOG4J), PROMOTIONS (APACHE LOG4J), UPGRADE (APACHE LOG4J), MONITORING AND DIAGNOSTICS (LOG4J), SMTPS, CORE (APACHE LOG4J), STORE CONNECT (APACHE LOG4J), UPDATES ENVIRONMENT MGMT (APACHE LOG4J), LOGGING (APACHE LOG4J), MARKETING (APACHE LOG4J) **Products:** PRIMAVERA UNIFIER, ORACLE ENTERPRISE MANAGER, ENTERPRISE MANAGER FOR PEOPLESOFT, ORACLE FLEXCUBE CORE BANKING, ORACLE DATA INTEGRATOR, ORACLE RETAIL ASSORTMENT PLANNING, ORACLE UTILITIES FRAMEWORK, ORACLE POLICY AUTOMATION FOR MOBILE DEVICES, SIEBEL UI FRAMEWORK, ORACLE RETAIL FINANCIAL INTEGRATION, ORACLE FINANCIAL SERVICES APPLICATIONS, ORACLE COMMUNICATIONS INSTANT MESSAGING SERVER, ORACLE RETAIL EFTLINK, ORACLE RETAIL BULK DATA INTEGRATION, ORACLE INSURANCE POLICY ADMINISTRATION J2EE, ORACLE FINANCIAL SERVICES ANALYTICAL APPLICATIONS INFRASTRUCTURE, ORACLE RETAIL STORE INVENTORY MANAGEMENT, STORAGETEK TAPE ANALYTICS SW TOOL, ORACLE CONSTRUCTION AND ENGINEERING, ORACLE JD EDWARDS, LOG4J, ORACLE COMMUNICATIONS APPLICATION SESSION CONTROLLER, ORACLE INSURANCE APPLICATIONS, ORACLE FINANCIAL SERVICES RETAIL CUSTOMER ANALYTICS, ORACLE RETAIL CUSTOMER MANAGEMENT AND SEGMENTATION FOUNDATION, ORACLE FLEXCUBE PRIVATE BANKING, ORACLE FLEXCUBE INVESTOR SERVICING, ORACLE COMMUNICATIONS NETWORK CHARGING AND CONTROL, ORACLE COMMUNICATIONS INTERACTIVE SESSION RECORDER, ORACLE INSURANCE DATA GATEWAY, ORACLE SIEBEL CRM, ORACLE FUSION MIDDLEWARE, ORACLE RETAIL INTEGRATION BUS, ORACLE COMMUNICATIONS BILLING AND REVENUE MANAGEMENT, ORACLE FINANCIAL SERVICES MARKET RISK MEASUREMENT AND MANAGEMENT, ORACLE INSURANCE INSBRIDGE RATING AND UNDERWRITING, ORACLE RETAIL ADVANCED INVENTORY PLANNING, ORACLE FUSION MIDDLEWARE MAPVIEWER, ORACLE COMMUNICATIONS APPLICATIONS, JD EDWARDS WORLD SECURITY, ORACLE UTILITIES APPLICATIONS, ORACLE HEALTH SCIENCES APPLICATIONS, ORACLE RETAIL INSIGHTS CLOUD SERVICE SUITE, ORACLE BANKING PLATFORM, ORACLE FINANCIAL SERVICES PRICE CREATION AND DISCOVERY, ORACLE RETAIL PREDICTIVE APPLICATION SERVER, SIEBEL ENGINEERING - INSTALLER & DEPLOYMENT, ORACLE PEOPLESOFT, ORACLE RETAIL APPLICATIONS, ORACLE COMMUNICATIONS OFFLINE MEDIATION CONTROLLER, ORACLE WEBLOGIC SERVER, ORACLE POLICY AUTOMATION CONNECTOR FOR SIEBEL, PRIMAVERA GATEWAY, ORACLE HEALTH SCIENCES INFORMATION MANAGER, ORACLE RETAIL XSTORE POINT OF SERVICE, ORACLE COMMUNICATIONS, ORACLE COMMUNICATIONS SERVICES GATEKEEPER, ORACLE POLICY AUTOMATION, ORACLE SYSTEMS, INSTANTIS ENTERPRISETRACK, ORACLE COMMUNICATIONS UNIFIED INVENTORY MANAGEMENT, ORACLE RETAIL ORDER BROKER, ORACLE INSURANCE RULES PALETTE, ORACLE FINANCIAL SERVICES INSTITUTIONAL PERFORMANCE ANALYTICS, ORACLE GOLDENGATE APPLICATION ADAPTERS, PEOPLESOFT ENTERPRISE PEOPLETOOLS, JD EDWARDS ENTERPRISEONE TOOLS, ORACLE RETAIL DATA EXTRACTOR FOR MERCHANDISING, ORACLE COMMUNICATIONS EAGLE FTP TABLE BASE RETRIEVAL, SIEBEL APPS - MARKETING

References

URLTags
https://lists.apache.org/thread.html/rd55f65c6822ff235eda435d31488cfbb9aa7055cdf47481ebee777cc%40%3Cissues.zookeeper.apache.org%3E WEB
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E WEB
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E WEB
https://lists.apache.org/thread.html/rc6b81c013618d1de1b5d6b8c1088aaf87b4bacc10c2371f15a566701@%3Cnotifications.zookeeper.apache.org%3E WEB
https://lists.apache.org/thread.html/rc6b81c013618d1de1b5d6b8c1088aaf87b4bacc10c2371f15a566701%40%3Cnotifications.zookeeper.apache.org%3E WEB
https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a@%3Ctorque-dev.db.apache.org%3E WEB
https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a%40%3Ctorque-dev.db.apache.org%3E WEB
https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3@%3Ctorque-dev.db.apache.org%3E WEB
https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3%40%3Ctorque-dev.db.apache.org%3E WEB
https://lists.apache.org/thread.html/rbc45eb0f53fd6242af3e666c2189464f848a851d408289840cecc6e3@%3Ccommits.zookeeper.apache.org%3E WEB

Timeline
Published2020-04-27By the CVE Program.
NVD record modified2026-06-17NVD's own last-modified date for this record.