CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11987

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 50.3%

CVSS Severity

CVSS v3 Score 8.2

CVSS v2 Score 6.4

References

Products affected by CVE-2020-11987

Apache » Batik » Version: N/A

cpe:2.3:a:apache:batik:-
Apache » Batik » Version: 1.0

cpe:2.3:a:apache:batik:1.0
Apache » Batik » Version: 1.1

cpe:2.3:a:apache:batik:1.1
Apache » Batik » Version: 1.1.1

cpe:2.3:a:apache:batik:1.1.1
Apache » Batik » Version: 1.10

cpe:2.3:a:apache:batik:1.10
Apache » Batik » Version: 1.12

cpe:2.3:a:apache:batik:1.12
Apache » Batik » Version: 1.13

cpe:2.3:a:apache:batik:1.13
Apache » Batik » Version: 1.5

cpe:2.3:a:apache:batik:1.5
Apache » Batik » Version: 1.5.1

cpe:2.3:a:apache:batik:1.5.1
Apache » Batik » Version: 1.6

cpe:2.3:a:apache:batik:1.6
Apache » Batik » Version: 1.6.1

cpe:2.3:a:apache:batik:1.6.1
Apache » Batik » Version: 1.7

cpe:2.3:a:apache:batik:1.7
Apache » Batik » Version: 1.7.1

cpe:2.3:a:apache:batik:1.7.1
Apache » Batik » Version: 1.8

cpe:2.3:a:apache:batik:1.8
Apache » Batik » Version: 1.9

cpe:2.3:a:apache:batik:1.9
Apache » Batik » Version: 1.9.1

cpe:2.3:a:apache:batik:1.9.1
Oracle » Agile Engineering Data Management » Version: 6.2.1.0

cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0
Oracle » Banking Apis » Version: 18.3

cpe:2.3:a:oracle:banking_apis:18.3
Oracle » Banking Apis » Version: 19.1

cpe:2.3:a:oracle:banking_apis:19.1
Oracle » Banking Apis » Version: 19.2

cpe:2.3:a:oracle:banking_apis:19.2
Oracle » Banking Apis » Version: 20.1

cpe:2.3:a:oracle:banking_apis:20.1
Oracle » Banking Apis » Version: 21.1

cpe:2.3:a:oracle:banking_apis:21.1
Oracle » Banking Digital Experience » Version: 18.3

cpe:2.3:a:oracle:banking_digital_experience:18.3
Oracle » Banking Digital Experience » Version: 19.1

cpe:2.3:a:oracle:banking_digital_experience:19.1
Oracle » Banking Digital Experience » Version: 19.2

cpe:2.3:a:oracle:banking_digital_experience:19.2
Oracle » Banking Digital Experience » Version: 20.1

cpe:2.3:a:oracle:banking_digital_experience:20.1
Oracle » Banking Digital Experience » Version: 21.1

cpe:2.3:a:oracle:banking_digital_experience:21.1
Oracle » Communications Application Session Controller » Version: 3.9m0p3

cpe:2.3:a:oracle:communications_application_session_controller:3.9m0p3
Oracle » Communications Metasolv Solution » Version: 6.3.0

cpe:2.3:a:oracle:communications_metasolv_solution:6.3.0
Oracle » Communications Metasolv Solution » Version: 6.3.1

cpe:2.3:a:oracle:communications_metasolv_solution:6.3.1
Oracle » Communications Offline Mediation Controller » Version: 12.0.0.3.0

cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3.0
Oracle » Enterprise Repository » Version: 11.1.1.7.0

cpe:2.3:a:oracle:enterprise_repository:11.1.1.7.0
Oracle » Flexcube Universal Banking » Version: 14.1.0

cpe:2.3:a:oracle:flexcube_universal_banking:14.1.0
Oracle » Flexcube Universal Banking » Version: 14.2.0

cpe:2.3:a:oracle:flexcube_universal_banking:14.2.0
Oracle » Flexcube Universal Banking » Version: 14.3.0

cpe:2.3:a:oracle:flexcube_universal_banking:14.3.0
Oracle » Flexcube Universal Banking » Version: 14.4.0

cpe:2.3:a:oracle:flexcube_universal_banking:14.4.0
Oracle » Fusion Middleware Mapviewer » Version: 12.2.1.4.0

cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.4.0
Oracle » Instantis Enterprisetrack » Version: 17.1

cpe:2.3:a:oracle:instantis_enterprisetrack:17.1
Oracle » Instantis Enterprisetrack » Version: 17.2

cpe:2.3:a:oracle:instantis_enterprisetrack:17.2
Oracle » Instantis Enterprisetrack » Version: 17.3

cpe:2.3:a:oracle:instantis_enterprisetrack:17.3
Oracle » Insurance Policy Administration » Version: 11.0

cpe:2.3:a:oracle:insurance_policy_administration:11.0
Oracle » Insurance Policy Administration » Version: 11.0.2

cpe:2.3:a:oracle:insurance_policy_administration:11.0.2
Oracle » Insurance Policy Administration » Version: 11.1.0

cpe:2.3:a:oracle:insurance_policy_administration:11.1.0
Oracle » Insurance Policy Administration » Version: 11.2.0

cpe:2.3:a:oracle:insurance_policy_administration:11.2.0
Oracle » Insurance Policy Administration » Version: 11.2.7

cpe:2.3:a:oracle:insurance_policy_administration:11.2.7
Oracle » Insurance Policy Administration » Version: 11.2.8

cpe:2.3:a:oracle:insurance_policy_administration:11.2.8
Oracle » Insurance Policy Administration » Version: 11.3.0

cpe:2.3:a:oracle:insurance_policy_administration:11.3.0
Oracle » Insurance Policy Administration » Version: 11.3.1

cpe:2.3:a:oracle:insurance_policy_administration:11.3.1
Oracle » Product Lifecycle Analytics » Version: 3.6.1

cpe:2.3:a:oracle:product_lifecycle_analytics:3.6.1
Oracle » Retail Back Office » Version: 14.1

cpe:2.3:a:oracle:retail_back_office:14.1
Oracle » Retail Central Office » Version: 14.1

cpe:2.3:a:oracle:retail_central_office:14.1
Oracle » Retail Order Broker » Version: 15.0

cpe:2.3:a:oracle:retail_order_broker:15.0
Oracle » Retail Order Broker » Version: 16.0

cpe:2.3:a:oracle:retail_order_broker:16.0
Oracle » Retail Order Management System Cloud Service » Version: 19.5

cpe:2.3:a:oracle:retail_order_management_system_cloud_service:19.5
Oracle » Retail Point-Of-Service » Version: 14.1

cpe:2.3:a:oracle:retail_point-of-service:14.1
Oracle » Retail Returns Management » Version: 14.1

cpe:2.3:a:oracle:retail_returns_management:14.1
Oracle » Weblogic Server » Version: 12.2.1.3.0

cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0
Oracle » Weblogic Server » Version: 12.2.1.4.0

cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0
Oracle » Weblogic Server » Version: 14.1.1.0.0

cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11987

Products

Pricing

Contact Us