Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-13936

An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity templates running Apache Velocity Engine versions up to 2.2.

Published

2021-03-10T08:15:14.103

Last Modified

2024-11-21T05:02:11.127

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application apache velocity_engine < 2.3 Yes
Application apache wss4j 2.3.1 Yes
Operating System debian debian_linux 9.0 Yes
Application oracle banking_deposits_and_lines_of_credit_servicing 2.12.0 Yes
Application oracle banking_enterprise_default_management ≤ 2.4.1 Yes
Application oracle banking_enterprise_default_management 2.6.2 Yes
Application oracle banking_enterprise_default_management 2.7.1 Yes
Application oracle banking_enterprise_default_management 2.10.0 Yes
Application oracle banking_enterprise_default_management 2.12.0 Yes
Application oracle banking_loans_servicing 2.12.0 Yes
Application oracle banking_party_management 2.7.0 Yes
Application oracle banking_platform ≤ 2.4.1 Yes
Application oracle banking_platform 2.6.2 Yes
Application oracle banking_platform 2.7.1 Yes
Application oracle communications_cloud_native_core_policy 1.14.0 Yes
Application oracle communications_network_integrity 7.3.6 Yes
Application oracle hospitality_token_proxy_service 19.2 Yes
Application oracle retail_integration_bus 19.0.1 Yes
Application oracle retail_order_broker 16.0 Yes
Application oracle retail_service_backbone 19.0.1 Yes
Application oracle retail_xstore_office_cloud_service 16.0.6 Yes
Application oracle retail_xstore_office_cloud_service 17.0.4 Yes
Application oracle retail_xstore_office_cloud_service 18.0.3 Yes
Application oracle retail_xstore_office_cloud_service 19.0.2 Yes
Application oracle retail_xstore_office_cloud_service 20.0.1 Yes
Application oracle utilities_testing_accelerator 6.0.0.1.1 Yes
Application oracle utilities_testing_accelerator 6.0.0.2.2 Yes
Application oracle utilities_testing_accelerator 6.0.0.3.1 Yes
References