CVE-2020-13956

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

• Apache Httpclient

  APP
  Apache
  < 4.5.135.0.0 – 5.0.3 (bez)

• Netapp Active Iq Unified Manager

  APP
  Netapp
  wszystkie wersje

• Netapp Snapcenter

  APP
  Netapp
  wszystkie wersje

• Oracle Commerce Guided Search

  APP
  Oracle
  11.3.2

• Oracle Communications Cloud Native Core Service Communication Proxy

  APP
  Oracle
  1.14.0

• Oracle Data Integrator

  APP
  Oracle
  12.2.1.3.012.2.1.4.0

• Oracle Jd Edwards Enterpriseone Orchestrator

  APP
  Oracle
  < 9.2.6.0

• Oracle Jd Edwards Enterpriseone Tools

  APP
  Oracle
  < 9.2.6.0

• Oracle Nosql Database

  APP
  Oracle
  < 20.3

• Oracle Peoplesoft Enterprise Peopletools

  APP
  Oracle
  8.578.58

• Oracle Peoplesoft Enterprise Pt Peopletools

  APP
  Oracle
  8.578.588.59

• Oracle Primavera Unifier

  APP
  Oracle
  16.116.218.819.1220.1217.7 – 17.12

• Oracle Retail Customer Management And Segmentation Foundation

  APP
  Oracle
  16.0 – 19.0

• Oracle Spatial Studio

  APP
  Oracle
  < 20.1.1

• Oracle Sql Developer

  APP
  Oracle
  < 20.4.1.407.0006< 21.99

• Oracle Weblogic Server

  APP
  Oracle
  12.2.1.4.014.1.1.0.0

• Quarkus

  APP
  Quarkus
  < 1.7.6