CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-6950

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.708

EPSS Ranking 98.6%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.3

References

Products affected by CVE-2020-6950

Eclipse » Mojarra » Version: 1.2-20

cpe:2.3:a:eclipse:mojarra:1.2-20
Eclipse » Mojarra » Version: 2.0.10

cpe:2.3:a:eclipse:mojarra:2.0.10
Eclipse » Mojarra » Version: 2.0.11

cpe:2.3:a:eclipse:mojarra:2.0.11
Eclipse » Mojarra » Version: 2.0.11-01

cpe:2.3:a:eclipse:mojarra:2.0.11-01
Eclipse » Mojarra » Version: 2.0.11-02

cpe:2.3:a:eclipse:mojarra:2.0.11-02
Eclipse » Mojarra » Version: 2.0.11-03

cpe:2.3:a:eclipse:mojarra:2.0.11-03
Eclipse » Mojarra » Version: 2.0.11-04

cpe:2.3:a:eclipse:mojarra:2.0.11-04
Eclipse » Mojarra » Version: 2.0.4

cpe:2.3:a:eclipse:mojarra:2.0.4
Eclipse » Mojarra » Version: 2.0.4-15

cpe:2.3:a:eclipse:mojarra:2.0.4-15
Eclipse » Mojarra » Version: 2.0.6

cpe:2.3:a:eclipse:mojarra:2.0.6
Eclipse » Mojarra » Version: 2.0.7

cpe:2.3:a:eclipse:mojarra:2.0.7
Eclipse » Mojarra » Version: 2.0.8

cpe:2.3:a:eclipse:mojarra:2.0.8
Eclipse » Mojarra » Version: 2.0.9

cpe:2.3:a:eclipse:mojarra:2.0.9
Eclipse » Mojarra » Version: 2.0.9-01

cpe:2.3:a:eclipse:mojarra:2.0.9-01
Eclipse » Mojarra » Version: 2.0.9-02

cpe:2.3:a:eclipse:mojarra:2.0.9-02
Eclipse » Mojarra » Version: 2.0.9-03

cpe:2.3:a:eclipse:mojarra:2.0.9-03
Eclipse » Mojarra » Version: 2.0.9-04

cpe:2.3:a:eclipse:mojarra:2.0.9-04
Eclipse » Mojarra » Version: 2.0.9-05

cpe:2.3:a:eclipse:mojarra:2.0.9-05
Eclipse » Mojarra » Version: 2.0.9-07

cpe:2.3:a:eclipse:mojarra:2.0.9-07
Eclipse » Mojarra » Version: 2.0.9-08

cpe:2.3:a:eclipse:mojarra:2.0.9-08
Eclipse » Mojarra » Version: 2.1.10

cpe:2.3:a:eclipse:mojarra:2.1.10
Eclipse » Mojarra » Version: 2.1.11

cpe:2.3:a:eclipse:mojarra:2.1.11
Eclipse » Mojarra » Version: 2.1.12

cpe:2.3:a:eclipse:mojarra:2.1.12
Eclipse » Mojarra » Version: 2.1.13

cpe:2.3:a:eclipse:mojarra:2.1.13
Eclipse » Mojarra » Version: 2.1.14

cpe:2.3:a:eclipse:mojarra:2.1.14
Eclipse » Mojarra » Version: 2.1.15

cpe:2.3:a:eclipse:mojarra:2.1.15
Eclipse » Mojarra » Version: 2.1.16

cpe:2.3:a:eclipse:mojarra:2.1.16
Eclipse » Mojarra » Version: 2.1.17

cpe:2.3:a:eclipse:mojarra:2.1.17
Eclipse » Mojarra » Version: 2.1.18

cpe:2.3:a:eclipse:mojarra:2.1.18
Eclipse » Mojarra » Version: 2.1.19

cpe:2.3:a:eclipse:mojarra:2.1.19
Eclipse » Mojarra » Version: 2.1.2

cpe:2.3:a:eclipse:mojarra:2.1.2
Eclipse » Mojarra » Version: 2.1.20

cpe:2.3:a:eclipse:mojarra:2.1.20
Eclipse » Mojarra » Version: 2.1.20-02

cpe:2.3:a:eclipse:mojarra:2.1.20-02
Eclipse » Mojarra » Version: 2.1.20-03

cpe:2.3:a:eclipse:mojarra:2.1.20-03
Eclipse » Mojarra » Version: 2.1.20-04

cpe:2.3:a:eclipse:mojarra:2.1.20-04
Eclipse » Mojarra » Version: 2.1.20-05

cpe:2.3:a:eclipse:mojarra:2.1.20-05
Eclipse » Mojarra » Version: 2.1.20-06

cpe:2.3:a:eclipse:mojarra:2.1.20-06
Eclipse » Mojarra » Version: 2.1.20-07

cpe:2.3:a:eclipse:mojarra:2.1.20-07
Eclipse » Mojarra » Version: 2.1.20-08

cpe:2.3:a:eclipse:mojarra:2.1.20-08
Eclipse » Mojarra » Version: 2.1.20-09

cpe:2.3:a:eclipse:mojarra:2.1.20-09
Eclipse » Mojarra » Version: 2.1.20-10

cpe:2.3:a:eclipse:mojarra:2.1.20-10
Eclipse » Mojarra » Version: 2.1.20-11

cpe:2.3:a:eclipse:mojarra:2.1.20-11
Eclipse » Mojarra » Version: 2.1.20-12

cpe:2.3:a:eclipse:mojarra:2.1.20-12
Eclipse » Mojarra » Version: 2.1.20-13

cpe:2.3:a:eclipse:mojarra:2.1.20-13
Eclipse » Mojarra » Version: 2.1.20-14

cpe:2.3:a:eclipse:mojarra:2.1.20-14
Eclipse » Mojarra » Version: 2.1.20-15

cpe:2.3:a:eclipse:mojarra:2.1.20-15
Eclipse » Mojarra » Version: 2.1.20-16

cpe:2.3:a:eclipse:mojarra:2.1.20-16
Eclipse » Mojarra » Version: 2.1.21

cpe:2.3:a:eclipse:mojarra:2.1.21
Eclipse » Mojarra » Version: 2.1.22

cpe:2.3:a:eclipse:mojarra:2.1.22
Eclipse » Mojarra » Version: 2.1.23

cpe:2.3:a:eclipse:mojarra:2.1.23
Eclipse » Mojarra » Version: 2.1.24

cpe:2.3:a:eclipse:mojarra:2.1.24
Eclipse » Mojarra » Version: 2.1.25

cpe:2.3:a:eclipse:mojarra:2.1.25
Eclipse » Mojarra » Version: 2.1.26

cpe:2.3:a:eclipse:mojarra:2.1.26
Eclipse » Mojarra » Version: 2.1.27

cpe:2.3:a:eclipse:mojarra:2.1.27
Eclipse » Mojarra » Version: 2.1.28

cpe:2.3:a:eclipse:mojarra:2.1.28
Eclipse » Mojarra » Version: 2.1.29

cpe:2.3:a:eclipse:mojarra:2.1.29
Eclipse » Mojarra » Version: 2.1.29-01

cpe:2.3:a:eclipse:mojarra:2.1.29-01
Eclipse » Mojarra » Version: 2.1.29-02

cpe:2.3:a:eclipse:mojarra:2.1.29-02
Eclipse » Mojarra » Version: 2.1.29-03

cpe:2.3:a:eclipse:mojarra:2.1.29-03
Eclipse » Mojarra » Version: 2.1.29-04

cpe:2.3:a:eclipse:mojarra:2.1.29-04
Eclipse » Mojarra » Version: 2.1.29-05

cpe:2.3:a:eclipse:mojarra:2.1.29-05
Eclipse » Mojarra » Version: 2.1.29-06

cpe:2.3:a:eclipse:mojarra:2.1.29-06
Eclipse » Mojarra » Version: 2.1.29-07

cpe:2.3:a:eclipse:mojarra:2.1.29-07
Eclipse » Mojarra » Version: 2.1.29-08

cpe:2.3:a:eclipse:mojarra:2.1.29-08
Eclipse » Mojarra » Version: 2.1.29-09

cpe:2.3:a:eclipse:mojarra:2.1.29-09
Eclipse » Mojarra » Version: 2.1.29-10

cpe:2.3:a:eclipse:mojarra:2.1.29-10
Eclipse » Mojarra » Version: 2.1.29-11

cpe:2.3:a:eclipse:mojarra:2.1.29-11
Eclipse » Mojarra » Version: 2.1.3

cpe:2.3:a:eclipse:mojarra:2.1.3
Eclipse » Mojarra » Version: 2.1.4

cpe:2.3:a:eclipse:mojarra:2.1.4
Eclipse » Mojarra » Version: 2.1.5-01

cpe:2.3:a:eclipse:mojarra:2.1.5-01
Eclipse » Mojarra » Version: 2.1.5-02

cpe:2.3:a:eclipse:mojarra:2.1.5-02
Eclipse » Mojarra » Version: 2.1.5-03

cpe:2.3:a:eclipse:mojarra:2.1.5-03
Eclipse » Mojarra » Version: 2.1.5-04

cpe:2.3:a:eclipse:mojarra:2.1.5-04
Eclipse » Mojarra » Version: 2.1.6

cpe:2.3:a:eclipse:mojarra:2.1.6
Eclipse » Mojarra » Version: 2.1.7

cpe:2.3:a:eclipse:mojarra:2.1.7
Eclipse » Mojarra » Version: 2.1.7-01

cpe:2.3:a:eclipse:mojarra:2.1.7-01
Eclipse » Mojarra » Version: 2.1.7-02

cpe:2.3:a:eclipse:mojarra:2.1.7-02
Eclipse » Mojarra » Version: 2.1.7-03

cpe:2.3:a:eclipse:mojarra:2.1.7-03
Eclipse » Mojarra » Version: 2.1.7-04

cpe:2.3:a:eclipse:mojarra:2.1.7-04
Eclipse » Mojarra » Version: 2.1.7-05

cpe:2.3:a:eclipse:mojarra:2.1.7-05
Eclipse » Mojarra » Version: 2.1.7-06

cpe:2.3:a:eclipse:mojarra:2.1.7-06
Eclipse » Mojarra » Version: 2.1.7-07

cpe:2.3:a:eclipse:mojarra:2.1.7-07
Eclipse » Mojarra » Version: 2.1.7-08

cpe:2.3:a:eclipse:mojarra:2.1.7-08
Eclipse » Mojarra » Version: 2.1.7-09

cpe:2.3:a:eclipse:mojarra:2.1.7-09
Eclipse » Mojarra » Version: 2.1.7-10

cpe:2.3:a:eclipse:mojarra:2.1.7-10
Eclipse » Mojarra » Version: 2.1.8

cpe:2.3:a:eclipse:mojarra:2.1.8
Eclipse » Mojarra » Version: 2.1.9

cpe:2.3:a:eclipse:mojarra:2.1.9
Eclipse » Mojarra » Version: 2.2.0

cpe:2.3:a:eclipse:mojarra:2.2.0
Eclipse » Mojarra » Version: 2.2.1

cpe:2.3:a:eclipse:mojarra:2.2.1
Eclipse » Mojarra » Version: 2.2.10

cpe:2.3:a:eclipse:mojarra:2.2.10
Eclipse » Mojarra » Version: 2.2.11

cpe:2.3:a:eclipse:mojarra:2.2.11
Eclipse » Mojarra » Version: 2.2.12

cpe:2.3:a:eclipse:mojarra:2.2.12
Eclipse » Mojarra » Version: 2.2.13

cpe:2.3:a:eclipse:mojarra:2.2.13
Eclipse » Mojarra » Version: 2.2.14

cpe:2.3:a:eclipse:mojarra:2.2.14
Eclipse » Mojarra » Version: 2.2.15

cpe:2.3:a:eclipse:mojarra:2.2.15
Eclipse » Mojarra » Version: 2.2.16

cpe:2.3:a:eclipse:mojarra:2.2.16
Eclipse » Mojarra » Version: 2.2.17

cpe:2.3:a:eclipse:mojarra:2.2.17
Eclipse » Mojarra » Version: 2.2.18

cpe:2.3:a:eclipse:mojarra:2.2.18
Eclipse » Mojarra » Version: 2.2.2

cpe:2.3:a:eclipse:mojarra:2.2.2
Eclipse » Mojarra » Version: 2.2.3

cpe:2.3:a:eclipse:mojarra:2.2.3
Eclipse » Mojarra » Version: 2.2.4

cpe:2.3:a:eclipse:mojarra:2.2.4
Eclipse » Mojarra » Version: 2.2.5

cpe:2.3:a:eclipse:mojarra:2.2.5
Eclipse » Mojarra » Version: 2.2.6

cpe:2.3:a:eclipse:mojarra:2.2.6
Eclipse » Mojarra » Version: 2.2.7

cpe:2.3:a:eclipse:mojarra:2.2.7
Eclipse » Mojarra » Version: 2.2.8

cpe:2.3:a:eclipse:mojarra:2.2.8
Eclipse » Mojarra » Version: 2.2.8-01

cpe:2.3:a:eclipse:mojarra:2.2.8-01
Eclipse » Mojarra » Version: 2.2.8-02

cpe:2.3:a:eclipse:mojarra:2.2.8-02
Eclipse » Mojarra » Version: 2.2.8-03

cpe:2.3:a:eclipse:mojarra:2.2.8-03
Eclipse » Mojarra » Version: 2.2.8-04

cpe:2.3:a:eclipse:mojarra:2.2.8-04
Eclipse » Mojarra » Version: 2.2.8-05

cpe:2.3:a:eclipse:mojarra:2.2.8-05
Eclipse » Mojarra » Version: 2.2.8-06

cpe:2.3:a:eclipse:mojarra:2.2.8-06
Eclipse » Mojarra » Version: 2.2.8-07

cpe:2.3:a:eclipse:mojarra:2.2.8-07
Eclipse » Mojarra » Version: 2.2.8-08

cpe:2.3:a:eclipse:mojarra:2.2.8-08
Eclipse » Mojarra » Version: 2.2.8-09

cpe:2.3:a:eclipse:mojarra:2.2.8-09
Eclipse » Mojarra » Version: 2.2.8-10

cpe:2.3:a:eclipse:mojarra:2.2.8-10
Eclipse » Mojarra » Version: 2.2.8-11

cpe:2.3:a:eclipse:mojarra:2.2.8-11
Eclipse » Mojarra » Version: 2.2.8-12

cpe:2.3:a:eclipse:mojarra:2.2.8-12
Eclipse » Mojarra » Version: 2.2.8-13

cpe:2.3:a:eclipse:mojarra:2.2.8-13
Eclipse » Mojarra » Version: 2.2.8-14

cpe:2.3:a:eclipse:mojarra:2.2.8-14
Eclipse » Mojarra » Version: 2.2.8-15

cpe:2.3:a:eclipse:mojarra:2.2.8-15
Eclipse » Mojarra » Version: 2.2.8-16

cpe:2.3:a:eclipse:mojarra:2.2.8-16
Eclipse » Mojarra » Version: 2.2.8-17

cpe:2.3:a:eclipse:mojarra:2.2.8-17
Eclipse » Mojarra » Version: 2.2.8-18

cpe:2.3:a:eclipse:mojarra:2.2.8-18
Eclipse » Mojarra » Version: 2.2.8-19

cpe:2.3:a:eclipse:mojarra:2.2.8-19
Eclipse » Mojarra » Version: 2.2.8-22

cpe:2.3:a:eclipse:mojarra:2.2.8-22
Eclipse » Mojarra » Version: 2.2.8-23

cpe:2.3:a:eclipse:mojarra:2.2.8-23
Eclipse » Mojarra » Version: 2.2.8-24

cpe:2.3:a:eclipse:mojarra:2.2.8-24
Eclipse » Mojarra » Version: 2.2.8-25

cpe:2.3:a:eclipse:mojarra:2.2.8-25
Eclipse » Mojarra » Version: 2.2.8-26

cpe:2.3:a:eclipse:mojarra:2.2.8-26
Eclipse » Mojarra » Version: 2.2.8-27

cpe:2.3:a:eclipse:mojarra:2.2.8-27
Eclipse » Mojarra » Version: 2.2.8-28

cpe:2.3:a:eclipse:mojarra:2.2.8-28
Eclipse » Mojarra » Version: 2.2.8-29

cpe:2.3:a:eclipse:mojarra:2.2.8-29
Eclipse » Mojarra » Version: 2.2.8-30

cpe:2.3:a:eclipse:mojarra:2.2.8-30
Eclipse » Mojarra » Version: 2.2.9

cpe:2.3:a:eclipse:mojarra:2.2.9
Eclipse » Mojarra » Version: 2.3.0

cpe:2.3:a:eclipse:mojarra:2.3.0
Eclipse » Mojarra » Version: 2.3.1

cpe:2.3:a:eclipse:mojarra:2.3.1
Eclipse » Mojarra » Version: 2.3.10

cpe:2.3:a:eclipse:mojarra:2.3.10
Eclipse » Mojarra » Version: 2.3.11

cpe:2.3:a:eclipse:mojarra:2.3.11
Eclipse » Mojarra » Version: 2.3.12

cpe:2.3:a:eclipse:mojarra:2.3.12
Eclipse » Mojarra » Version: 2.3.13

cpe:2.3:a:eclipse:mojarra:2.3.13
Eclipse » Mojarra » Version: 2.3.2

cpe:2.3:a:eclipse:mojarra:2.3.2
Eclipse » Mojarra » Version: 2.3.3

cpe:2.3:a:eclipse:mojarra:2.3.3
Eclipse » Mojarra » Version: 2.3.3.99

cpe:2.3:a:eclipse:mojarra:2.3.3.99
Eclipse » Mojarra » Version: 2.3.4

cpe:2.3:a:eclipse:mojarra:2.3.4
Eclipse » Mojarra » Version: 2.3.5

cpe:2.3:a:eclipse:mojarra:2.3.5
Eclipse » Mojarra » Version: 2.3.6

cpe:2.3:a:eclipse:mojarra:2.3.6
Eclipse » Mojarra » Version: 2.3.7

cpe:2.3:a:eclipse:mojarra:2.3.7
Eclipse » Mojarra » Version: 2.3.8

cpe:2.3:a:eclipse:mojarra:2.3.8
Eclipse » Mojarra » Version: 2.3.9

cpe:2.3:a:eclipse:mojarra:2.3.9
Oracle » Banking Enterprise Default Management » Version: 2.10.0

cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0
Oracle » Banking Enterprise Default Management » Version: 2.12.0

cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0
Oracle » Banking Platform » Version: 2.12.0

cpe:2.3:a:oracle:banking_platform:2.12.0
Oracle » Banking Platform » Version: 2.6.2

cpe:2.3:a:oracle:banking_platform:2.6.2
Oracle » Banking Platform » Version: 2.7.1

cpe:2.3:a:oracle:banking_platform:2.7.1
Oracle » Banking Platform » Version: 2.9.0

cpe:2.3:a:oracle:banking_platform:2.9.0
Oracle » Communications Network Integrity » Version: 7.3.6

cpe:2.3:a:oracle:communications_network_integrity:7.3.6
Oracle » Communications Pricing Design Center » Version: 12.0.0.3.0

cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.3.0
Oracle » Hyperion Calculation Manager » Version: Any

cpe:2.3:a:oracle:hyperion_calculation_manager:*
Oracle » Retail Merchandising System » Version: 19.0.1

cpe:2.3:a:oracle:retail_merchandising_system:19.0.1
Oracle » Solaris Cluster » Version: 4.0

cpe:2.3:a:oracle:solaris_cluster:4.0
Oracle » Time And Labor » Version: 12.2.11

cpe:2.3:a:oracle:time_and_labor:12.2.11
Oracle » Time And Labor » Version: 12.2.6

cpe:2.3:a:oracle:time_and_labor:12.2.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-6950

Products

Pricing

Contact Us