| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.httpcomponents:httpclient | ≥ 5.0.0, < 5.0.3< 4.5.13 | 5.0.34.5.13 |
| httpclient | ≥ 5.0.0, < 5.0.3< 4.5.13 | 5.0.34.5.13 |
| commerce guided search | = 11.3.2 | |
| communications cloud native core service communication proxy | = 1.14.0 | |
| data integrator | = 12.2.1.3.0= 12.2.1.4.0 | |
| jd edwards enterpriseone orchestrator | < 9.2.6.0 | 9.2.6.0 |
| jd edwards enterpriseone tools | < 9.2.6.0 | 9.2.6.0 |
| nosql database | < 20.3 | 20.3 |
| peoplesoft enterprise peopletools | = 8.57= 8.58 | |
| peoplesoft enterprise pt peopletools | = 8.57= 8.58= 8.59 | |
| primavera unifier | = 16.1= 16.2= 18.8= 19.12= 20.12≥ 17.7, ≤ 17.12 | |
| retail customer management and segmentation foundation | ≥ 16.0, ≤ 19.0 | |
| spatial studio | < 20.1.1 | 20.1.1 |
| sql developer | < 20.4.1.407.0006< 21.99 | 20.4.1.407.000621.99 |
| weblogic server | = 12.2.1.4.0= 14.1.1.0.0 | |
| quarkus | < 1.7.6 | 1.7.6 |
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free