| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.pdfbox:pdfbox | ≥ 2.0.0, < 2.0.23 | 2.0.23 |
| pdfbox | ≥ 2.0.0, ≤ 2.0.22 | |
| banking trade finance process management | = 14.2.0= 14.3.0= 14.5.0 | |
| banking treasury management | = 14.5 | |
| banking virtual account management | = 14.2.0= 14.3.0= 14.5.0 | |
| communications session report manager | ≥ 8.0.0, ≤ 8.2.4.0 | |
| flexcube universal banking | = 14.5.0≥ 14.0.0, ≤ 14.3.0 | |
| hyperion financial reporting | = 11.1.2.4= 11.2.6.0 | |
| hyperion infrastructure technology | < 11.2.8.0 | 11.2.8.0 |
| outside in technology | = 8.5.5 | |
| primavera unifier | = 18.8= 19.12= 20.12≥ 17.7, ≤ 17.12 | |
| retail customer management and segmentation foundation | = 19.0 | |
| retail xstore point of service | = 16.0.6= 17.0.4= 18.0.3= 19.0.2= 20.0.1 | |
| webcenter sites | = 12.2.1.3.0= 12.2.1.4.0 |
A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free