CVE-2020-17530

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• Apache/Struts2 versions

  cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*range: >=2.0.0,<2.5.30
  • (no CPE)range: Struts 2.0.0 - Struts 2.5.25
• Oracle Corporation/Business Intelligence2 versions

  cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*+ 1 more

  • cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*
• Oracle Corporation/Communications Diameter Intelligence Hub4 versions

  cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.0.0:*:*:*:*:*:*:*+ 3 more

  • cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.2.3:*:*:*:*:*:*:*
• Oracle Corporation/Communications Policy Management

  cpe:2.3:a:oracle:communications_policy_management:12.5.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Pricing Design Center

  cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.3.0:*:*:*:*:*:*:*
• Oracle Corporation/Financial Services Data Integration Hub2 versions

  cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.3:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.6:*:*:*:*:*:*:*
• Oracle Corporation/Hospitality Opera 5

  cpe:2.3:a:oracle:hospitality_opera_5:5.6:*:*:*:*:*:*:*
• Oracle Corporation/Mysql Enterprise Monitor

  cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.23:*:*:*:*:*:*:*
• ghsa-coords

  pkg:maven/org.apache.struts/struts2-core

  Range: >= 2.0.0, < 2.5.26

• security.netapp.com/advisory/ntap-20210115-0005/nvdPatchThird Party Advisory
• www.oracle.com//security-alerts/cpujul2021.htmlnvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpuApr2021.htmlnvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpujan2021.htmlnvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpujan2022.htmlnvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpuoct2021.htmlnvdPatchThird Party AdvisoryWEB
• jvn.jp/en/jp/JVN43969166/index.htmlnvdThird Party AdvisoryWEB
• packetstormsecurity.com/files/160721/Apache-Struts-2-Forced-Multi-OGNL-Evaluation.htmlnvdThird Party AdvisoryVDB EntryWEB
• www.openwall.com/lists/oss-security/2022/04/12/6nvdMailing ListThird Party AdvisoryWEB
• cwiki.apache.org/confluence/display/WW/S2-061nvdVendor AdvisoryWEB
• github.com/advisories/GHSA-jc35-q369-45pvghsaADVISORY
• nvd.nist.gov/vuln/detail/CVE-2020-17530ghsaADVISORY
• www.oracle.com/security-alerts/cpuapr2022.htmlnvdThird Party AdvisoryWEB
• security.netapp.com/advisory/ntap-20210115-0005ghsaWEB
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government ResourceWEB

No linked articles in our index yet.