CVE-2020-28500

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• Lodash/Lodash2 versions

  cpe:2.3:a:lodash:lodash:*:*:*:*:*:node.js:*:*+ 1 more

  • cpe:2.3:a:lodash:lodash:*:*:*:*:*:node.js:*:*range: <4.17.21
  • (no CPE)
• Oracle Corporation/Banking Corporate Lending Process Management3 versions

  cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5.0:*:*:*:*:*:*:*
• Oracle Corporation/Banking Credit Facilities Process Management3 versions

  cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5.0:*:*:*:*:*:*:*
• Oracle Corporation/Banking Extensibility Workbench3 versions

  cpe:2.3:a:oracle:banking_extensibility_workbench:14.2.0:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:a:oracle:banking_extensibility_workbench:14.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_extensibility_workbench:14.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_extensibility_workbench:14.5.0:*:*:*:*:*:*:*
• Oracle Corporation/Banking Supply Chain Finance3 versions

  cpe:2.3:a:oracle:banking_supply_chain_finance:14.2.0:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:a:oracle:banking_supply_chain_finance:14.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_supply_chain_finance:14.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_supply_chain_finance:14.5.0:*:*:*:*:*:*:*
• Oracle Corporation/Banking Trade Finance Process Management3 versions

  cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2.0:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_trade_finance_process_management:14.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Cloud Native Core Policy

  cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.11.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Design Studio

  cpe:2.3:a:oracle:communications_design_studio:7.4.2:*:*:*:*:*:*:*
• Oracle Corporation/Communications Services Gatekeeper

  cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Session Border Controller2 versions

  cpe:2.3:a:oracle:communications_session_border_controller:8.4:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:communications_session_border_controller:8.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_session_border_controller:9.0:*:*:*:*:*:*:*
• Oracle Corporation/Enterprise Communications Broker2 versions

  cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:enterprise_communications_broker:3.3.0:*:*:*:*:*:*:*
• Oracle Corporation/Financial Services Crime And Compliance Management Studio2 versions

  cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.3.0:*:*:*:*:*:*:*
• Oracle Corporation/Health Sciences Data Management Workbench2 versions

  cpe:2.3:a:oracle:health_sciences_data_management_workbench:2.5.2.1:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:health_sciences_data_management_workbench:2.5.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:health_sciences_data_management_workbench:3.0.0.0:*:*:*:*:*:*:*
• Oracle Corporation/Jd Edwards Enterpriseone

  cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*

  Range: <9.2.6.1
• Oracle Corporation/Peoplesoft Enterprise Peopletools2 versions

  cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*
• Oracle Corporation/Primavera Gateway

  cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*

  Range: >=17.12.0,<=17.12.11
• Oracle Corporation/Primavera Unifier4 versions

  cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*+ 3 more

  • cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*range: >=17.7,<=17.12
  • cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*
• Oracle Corporation/Retail Customer Management And Segmentation Foundation

  cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:*
• Siemens Foundation/Sinec Ins3 versions

  cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*range: <1.0
  • cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*
  • cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*
• ghsa-coords5 versions

  pkg:gem/lodash-railspkg:npm/lodashpkg:npm/lodash-espkg:npm/lodash.trimpkg:npm/lodash.trimend

  >= 4.0.0, < 4.17.21+ 4 more

  • (no CPE)range: >= 4.0.0, < 4.17.21
  • (no CPE)range: >= 4.0.0, < 4.17.21
  • (no CPE)range: >= 4.0.0, < 4.17.21
  • (no CPE)range: >= 4.0.0, <= 4.5.1
  • (no CPE)range: >= 4.0.0, <= 4.5.1

• cert-portal.siemens.com/productcert/pdf/ssa-637483.pdfnvdPatchThird Party AdvisoryWEB
• github.com/lodash/lodash/pull/5065nvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpujan2022.htmlnvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpujul2022.htmlnvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpuoct2021.htmlnvdPatchThird Party AdvisoryWEB
• snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074896nvdExploitThird Party AdvisoryWEB
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074894nvdExploitThird Party AdvisoryWEB
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074892nvdExploitThird Party AdvisoryWEB
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074895nvdExploitThird Party AdvisoryWEB
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074893nvdExploitThird Party AdvisoryWEB
• snyk.io/vuln/SNYK-JS-LODASH-1018905nvdExploitThird Party AdvisoryWEB
• github.com/advisories/GHSA-29mw-wpgm-hmr9ghsaADVISORY
• nvd.nist.gov/vuln/detail/CVE-2020-28500ghsaADVISORY
• security.netapp.com/advisory/ntap-20210312-0006/nvdThird Party Advisory
• www.oracle.com//security-alerts/cpujul2021.htmlnvdNot ApplicableThird Party AdvisoryWEB
• github.com/github/advisory-database/pull/6139ghsaWEB
• github.com/lodash/lodash/blob/npm/trimEnd.js%23L8nvdBroken LinkWEB
• github.com/lodash/lodash/commit/c4847ebe7d14540bb28a8b932a9ce1b9ecbfee1aghsaWEB
• github.com/lodash/lodash/pull/5065/commits/02906b8191d3c100c193fe6f7b27d1c40f200bb7ghsaWEB
• github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2020-28500.ymlghsaWEB
• security.netapp.com/advisory/ntap-20210312-0006ghsaWEB

No linked articles in our index yet.