| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| org.apache.pdfbox:pdfbox | ≥ 2.0.14, < 2.0.15 | 2.0.15 |
| james | = 3.3.0= 3.4.0 | |
| pdfbox | = 2.0.14 | |
| banking corporate lending process management | = 14.2= 14.3= 14.5 | |
| banking credit facilities process management | = 14.2= 14.3= 14.5 | |
| banking supply chain finance | = 14.2= 14.3= 14.5 | |
| banking trade finance process management | = 14.2= 14.3= 14.5 | |
| banking virtual account management | = 14.2= 14.3.0= 14.5 | |
| communications messaging server | = 8.1 | |
| communications session report manager | ≥ 8.0.0.0, ≤ 8.2.4.0 | |
| hyperion financial reporting | = 11.1.2.4= 11.2.6.0 | |
| peoplesoft enterprise peopletools | = 8.58= 8.59 | |
| retail xstore point of service | = 16.0.6= 17.0= 18.0.3 | |
| webcenter sites | = 12.2.1.3.0= 12.2.1.4.0 |
Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン