| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| org.apache.httpcomponents:httpclient | ≥ 5.0.0, < 5.0.3< 4.5.13 | 5.0.34.5.13 |
| httpclient | ≥ 5.0.0, < 5.0.3< 4.5.13 | 5.0.34.5.13 |
| commerce guided search | = 11.3.2 | |
| communications cloud native core service communication proxy | = 1.14.0 | |
| data integrator | = 12.2.1.3.0= 12.2.1.4.0 | |
| jd edwards enterpriseone orchestrator | < 9.2.6.0 | 9.2.6.0 |
| jd edwards enterpriseone tools | < 9.2.6.0 | 9.2.6.0 |
| nosql database | < 20.3 | 20.3 |
| peoplesoft enterprise peopletools | = 8.57= 8.58 | |
| peoplesoft enterprise pt peopletools | = 8.57= 8.58= 8.59 | |
| primavera unifier | = 16.1= 16.2= 18.8= 19.12= 20.12≥ 17.7, ≤ 17.12 | |
| retail customer management and segmentation foundation | ≥ 16.0, ≤ 19.0 | |
| spatial studio | < 20.1.1 | 20.1.1 |
| sql developer | < 20.4.1.407.0006< 21.99 | 20.4.1.407.000621.99 |
| weblogic server | = 12.2.1.4.0= 14.1.1.0.0 | |
| quarkus | < 1.7.6 | 1.7.6 |
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン