CVE-2020-6950
02.06.2021, 16:15
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
| Vendor | Product | Version |
|---|---|---|
| eclipse | mojarra | 𝑥 < 2.3.14 |
| oracle | banking_enterprise_default_management | 2.10.0 |
| oracle | banking_enterprise_default_management | 2.12.0 |
| oracle | banking_platform | 2.6.2 |
| oracle | banking_platform | 2.7.1 |
| oracle | banking_platform | 2.9.0 |
| oracle | banking_platform | 2.12.0 |
| oracle | communications_network_integrity | 7.3.6 |
| oracle | communications_pricing_design_center | 12.0.0.3.0 |
| oracle | hyperion_calculation_manager | 𝑥 < 11.2.8.0 |
| oracle | retail_merchandising_system | 19.0.1 |
| oracle | solaris_cluster | 4.0 |
| oracle | time_and_labor | 12.2.6 ≤ 𝑥 ≤ 12.2.11 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References