{"id":"CVE-2017-5645","details":"In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","aliases":["GHSA-fxph-q3j8-mv87"],"modified":"2026-07-07T08:49:36.421607873Z","published":"2017-04-17T21:59:00.373Z","related":["openSUSE-SU-2024:11026-1"],"database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.2"}],"source":"CPE_RANGE","vendor_product":"oracle:communications_interactive_session_recorder","cpes":["cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:*"]},{"vendor_product":"oracle:communications_messaging_server","cpes":["cpe:2.3:a:oracle:communications_messaging_server:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"8.0.2"}],"source":"CPE_RANGE"},{"source":"CPE_RANGE","vendor_product":"oracle:communications_network_integrity","cpes":["cpe:2.3:a:oracle:communications_network_integrity:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.3.2"},{"last_affected":"7.3.6"}]},{"cpes":["cpe:2.3:a:oracle:communications_webrtc_session_controller:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"7.2"}],"source":"CPE_RANGE","vendor_product":"oracle:communications_webrtc_session_controller"},{"vendor_product":"oracle:enterprise_manager_for_mysql_database","cpes":["cpe:2.3:a:oracle:enterprise_manager_for_mysql_database:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"13.2.2.0.0"}],"source":"CPE_RANGE"},{"cpes":["cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.3.3.0.0"},{"last_affected":"7.3.3.0.2"},{"introduced":"8.0.0.0.0"},{"last_affected":"8.0.7.0.0"}],"source":"CPE_RANGE","vendor_product":"oracle:financial_services_analytical_applications_infrastructure"},{"source":"CPE_RANGE","vendor_product":"oracle:financial_services_behavior_detection_platform","cpes":["cpe:2.3:a:oracle:financial_services_behavior_detection_platform:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0.0.0.0"},{"last_affected":"8.0.4.0.0"}]},{"extracted_events":[{"introduced":"14.1.0"},{"last_affected":"14.8.0"}],"source":"CPE_RANGE","vendor_product":"oracle:financial_services_lending_and_leasing","cpes":["cpe:2.3:a:oracle:financial_services_lending_and_leasing:*:*:*:*:*:*:*:*"]},{"vendor_product":"oracle:financial_services_profitability_management","cpes":["cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0.0.0.0"},{"last_affected":"8.0.7.0.0"}],"source":"CPE_RANGE"},{"extracted_events":[{"introduced":"17.1"},{"last_affected":"17.3"}],"source":"CPE_RANGE","vendor_product":"oracle:instantis_enterprisetrack","cpes":["cpe:2.3:a:oracle:instantis_enterprisetrack:*:*:*:*:*:*:*:*"]},{"source":"CPE_RANGE","vendor_product":"oracle:mysql_enterprise_monitor","cpes":["cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"3.4.0.0"},{"last_affected":"3.4.7.4297"},{"introduced":"4.0.0.0"},{"last_affected":"4.0.4.5235"},{"introduced":"8.0.0.0.0"},{"last_affected":"8.0.0.8131"}]},{"vendor_product":"oracle:primavera_gateway","cpes":["cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"16.2.0"},{"last_affected":"16.2.11"},{"introduced":"17.12.0"},{"last_affected":"17.12.7"}],"source":"CPE_RANGE"},{"cpes":["cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.1.2.4.0"},{"last_affected":"11.1.2.4.0"}],"source":"CPE_STRING","vendor_product":"oracle:api_gateway"},{"extracted_events":[{"introduced":"13.3.0.1"},{"last_affected":"13.3.0.1"}],"source":"CPE_STRING","vendor_product":"oracle:application_testing_suite","cpes":["cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:autovue_vuelink_integration:21.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:autovue_vuelink_integration:21.0.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"21.0.0"},{"last_affected":"21.0.0"},{"introduced":"21.0.1"},{"last_affected":"21.0.1"}],"source":"CPE_STRING","vendor_product":"oracle:autovue_vuelink_integration"},{"vendor_product":"oracle:banking_platform","cpes":["cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.6.0"},{"last_affected":"2.6.0"},{"introduced":"2.6.1"},{"last_affected":"2.6.1"},{"introduced":"2.6.2"},{"last_affected":"2.6.2"}],"source":"CPE_STRING"},{"cpes":["cpe:2.3:a:oracle:bi_publisher:11.1.1.7.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:bi_publisher:11.1.1.9.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:bi_publisher:12.2.1.3.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.1.1.7.0"},{"last_affected":"11.1.1.7.0"},{"introduced":"11.1.1.9.0"},{"last_affected":"11.1.1.9.0"},{"introduced":"12.2.1.3.0"},{"last_affected":"12.2.1.3.0"},{"introduced":"12.2.1.4.0"},{"last_affected":"12.2.1.4.0"}],"source":"CPE_STRING","vendor_product":"oracle:bi_publisher"},{"cpes":["cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.1"},{"last_affected":"6.1"}],"source":"CPE_STRING","vendor_product":"oracle:communications_converged_application_server_-_service_controller"},{"source":"CPE_STRING","vendor_product":"oracle:communications_instant_messaging_server","cpes":["cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.3.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"10.0.1.3.0"},{"last_affected":"10.0.1.3.0"}]},{"extracted_events":[{"introduced":"6.1"},{"last_affected":"6.1"}],"source":"CPE_STRING","vendor_product":"oracle:communications_online_mediation_controller","cpes":["cpe:2.3:a:oracle:communications_online_mediation_controller:6.1:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:communications_pricing_design_center:11.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_pricing_design_center:12.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.1"},{"last_affected":"11.1"},{"introduced":"12.0"},{"last_affected":"12.0"}],"source":"CPE_STRING","vendor_product":"oracle:communications_pricing_design_center"},{"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"}],"source":"CPE_STRING","vendor_product":"oracle:communications_service_broker","cpes":["cpe:2.3:a:oracle:communications_service_broker:6.0:*:*:*:*:*:*:*"]},{"extracted_events":[{"introduced":"12.1.2.0.2"},{"last_affected":"12.1.2.0.2"},{"introduced":"12.1.2.0.5"},{"last_affected":"12.1.2.0.5"}],"source":"CPE_STRING","vendor_product":"oracle:configuration_manager","cpes":["cpe:2.3:a:oracle:configuration_manager:12.1.2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:configuration_manager:12.1.2.0.5:*:*:*:*:*:*:*"]},{"extracted_events":[{"introduced":"3.2.0"},{"last_affected":"3.2.0"}],"source":"CPE_STRING","vendor_product":"oracle:endeca_information_discovery_studio","cpes":["cpe:2.3:a:oracle:endeca_information_discovery_studio:3.2.0:*:*:*:*:*:*:*"]},{"vendor_product":"oracle:enterprise_data_quality","cpes":["cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.2.1.3.0"},{"last_affected":"12.2.1.3.0"}],"source":"CPE_STRING"},{"cpes":["cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0.5:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0.5"},{"last_affected":"12.1.0.5"},{"introduced":"13.2.0.0"},{"last_affected":"13.2.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_manager_base_platform"},{"extracted_events":[{"introduced":"12.1.0.5"},{"last_affected":"12.1.0.5"},{"introduced":"13.2.0.0"},{"last_affected":"13.2.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_manager_for_fusion_middleware","cpes":["cpe:2.3:a:oracle:enterprise_manager_for_fusion_middleware:12.1.0.5:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_for_fusion_middleware:13.2.0.0:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:enterprise_manager_for_oracle_database:12.1.0.8:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_for_oracle_database:13.2.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0.8"},{"last_affected":"12.1.0.8"},{"introduced":"13.2.2"},{"last_affected":"13.2.2"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_manager_for_oracle_database"},{"extracted_events":[{"introduced":"13.1.1.1"},{"last_affected":"13.1.1.1"},{"introduced":"13.2.1.1"},{"last_affected":"13.2.1.1"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_manager_for_peoplesoft","cpes":["cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.1.1.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.2.1.1:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:financial_services_behavior_detection_platform:6.1.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.1.1"},{"last_affected":"6.1.1"}],"source":"CPE_STRING","vendor_product":"oracle:financial_services_behavior_detection_platform"},{"cpes":["cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.0.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.0.5:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0.4"},{"last_affected":"8.0.4"},{"introduced":"8.0.5"},{"last_affected":"8.0.5"}],"source":"CPE_STRING","vendor_product":"oracle:financial_services_hedge_management_and_ifrs_valuations"},{"cpes":["cpe:2.3:a:oracle:financial_services_lending_and_leasing:12.5.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.5.0"},{"last_affected":"12.5.0"}],"source":"CPE_STRING","vendor_product":"oracle:financial_services_lending_and_leasing"},{"vendor_product":"oracle:financial_services_loan_loss_forecasting_and_provisioning","cpes":["cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.0.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.0.5:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0.4"},{"last_affected":"8.0.4"},{"introduced":"8.0.5"},{"last_affected":"8.0.5"}],"source":"CPE_STRING"},{"extracted_events":[{"introduced":"6.1.1"},{"last_affected":"6.1.1"}],"source":"CPE_STRING","vendor_product":"oracle:financial_services_profitability_management","cpes":["cpe:2.3:a:oracle:financial_services_profitability_management:6.1.1:*:*:*:*:*:*:*"]},{"vendor_product":"oracle:financial_services_regulatory_reporting_with_agilereporter","cpes":["cpe:2.3:a:oracle:financial_services_regulatory_reporting_with_agilereporter:8.0.9.2.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0.9.2.0"},{"last_affected":"8.0.9.2.0"}],"source":"CPE_STRING"},{"cpes":["cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:flexcube_investor_servicing:12.4.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:flexcube_investor_servicing:14.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.0.4"},{"last_affected":"12.0.4"},{"introduced":"12.1.0"},{"last_affected":"12.1.0"},{"introduced":"12.3.0"},{"last_affected":"12.3.0"},{"introduced":"12.4.0"},{"last_affected":"12.4.0"},{"introduced":"14.0.0"},{"last_affected":"14.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:flexcube_investor_servicing"},{"extracted_events":[{"introduced":"12.2.1.2"},{"last_affected":"12.2.1.2"},{"introduced":"12.2.1.3"},{"last_affected":"12.2.1.3"}],"source":"CPE_STRING","vendor_product":"oracle:fusion_middleware_mapviewer","cpes":["cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3:*:*:*:*:*:*:*"]},{"extracted_events":[{"introduced":"12.3.2.1.1"},{"last_affected":"12.3.2.1.1"}],"source":"CPE_STRING","vendor_product":"oracle:goldengate","cpes":["cpe:2.3:a:oracle:goldengate:12.3.2.1.1:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:goldengate_application_adapters:12.3.2.1.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.3.2.1.1"},{"last_affected":"12.3.2.1.1"}],"source":"CPE_STRING","vendor_product":"oracle:goldengate_application_adapters"},{"extracted_events":[{"introduced":"11.1.1.5.8"},{"last_affected":"11.1.1.5.8"}],"source":"CPE_STRING","vendor_product":"oracle:identity_analytics","cpes":["cpe:2.3:a:oracle:identity_analytics:11.1.1.5.8:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:identity_management_suite:11.1.2.3.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:identity_management_suite:12.2.1.3.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.1.2.3.0"},{"last_affected":"11.1.2.3.0"},{"introduced":"12.2.1.3.0"},{"last_affected":"12.2.1.3.0"}],"source":"CPE_STRING","vendor_product":"oracle:identity_management_suite"},{"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"oracle:identity_manager_connector","cpes":["cpe:2.3:a:oracle:identity_manager_connector:9.0:*:*:*:*:*:*:*"]},{"source":"CPE_STRING","vendor_product":"oracle:in-memory_performance-driven_planning","cpes":["cpe:2.3:a:oracle:in-memory_performance-driven_planning:12.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:in-memory_performance-driven_planning:12.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1"},{"last_affected":"12.1"},{"introduced":"12.2"},{"last_affected":"12.2"}]},{"vendor_product":"oracle:insurance_calculation_engine","cpes":["cpe:2.3:a:oracle:insurance_calculation_engine:10.1.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:insurance_calculation_engine:10.2.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"10.1.1"},{"last_affected":"10.1.1"},{"introduced":"10.2.1"},{"last_affected":"10.2.1"}],"source":"CPE_STRING"},{"source":"CPE_STRING","vendor_product":"oracle:insurance_policy_administration","cpes":["cpe:2.3:a:oracle:insurance_policy_administration:10.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:insurance_policy_administration:10.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:insurance_policy_administration:10.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:insurance_policy_administration:11.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"10.0"},{"last_affected":"10.0"},{"introduced":"10.1"},{"last_affected":"10.1"},{"introduced":"10.2"},{"last_affected":"10.2"},{"introduced":"11.0"},{"last_affected":"11.0"}]},{"extracted_events":[{"introduced":"10.0"},{"last_affected":"10.0"},{"introduced":"10.1"},{"last_affected":"10.1"},{"introduced":"10.2"},{"last_affected":"10.2"},{"introduced":"11.0"},{"last_affected":"11.0"},{"introduced":"11.1"},{"last_affected":"11.1"}],"source":"CPE_STRING","vendor_product":"oracle:insurance_rules_palette","cpes":["cpe:2.3:a:oracle:insurance_rules_palette:10.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:insurance_rules_palette:10.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:insurance_rules_palette:10.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:insurance_rules_palette:11.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:insurance_rules_palette:11.1:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:4.0.1.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.0.1.0"},{"last_affected":"4.0.1.0"},{"introduced":"9.2"},{"last_affected":"9.2"}],"source":"CPE_STRING","vendor_product":"oracle:jd_edwards_enterpriseone_tools"},{"vendor_product":"oracle:jdeveloper","cpes":["cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jdeveloper:12.1.3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.1.1.9.0"},{"last_affected":"11.1.1.9.0"},{"introduced":"12.1.3.0.0"},{"last_affected":"12.1.3.0.0"},{"introduced":"12.2.1.3.0"},{"last_affected":"12.2.1.3.0"}],"source":"CPE_STRING"},{"vendor_product":"oracle:peoplesoft_enterprise_fin_install","cpes":["cpe:2.3:a:oracle:peoplesoft_enterprise_fin_install:9.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.2"},{"last_affected":"9.2"}],"source":"CPE_STRING"},{"cpes":["cpe:2.3:a:oracle:policy_automation:10.4.7:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation:12.1.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation:12.2.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation:12.2.10:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation:12.2.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation:12.2.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation:12.2.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation:12.2.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation:12.2.5:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation:12.2.6:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation:12.2.7:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation:12.2.8:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation:12.2.9:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"10.4.7"},{"last_affected":"10.4.7"},{"introduced":"12.1.0"},{"last_affected":"12.1.0"},{"introduced":"12.1.1"},{"last_affected":"12.1.1"},{"introduced":"12.2.0"},{"last_affected":"12.2.0"},{"introduced":"12.2.1"},{"last_affected":"12.2.1"},{"introduced":"12.2.2"},{"last_affected":"12.2.2"},{"introduced":"12.2.3"},{"last_affected":"12.2.3"},{"introduced":"12.2.4"},{"last_affected":"12.2.4"},{"introduced":"12.2.5"},{"last_affected":"12.2.5"},{"introduced":"12.2.6"},{"last_affected":"12.2.6"},{"introduced":"12.2.7"},{"last_affected":"12.2.7"},{"introduced":"12.2.8"},{"last_affected":"12.2.8"},{"introduced":"12.2.9"},{"last_affected":"12.2.9"},{"introduced":"12.2.10"},{"last_affected":"12.2.10"}],"source":"CPE_STRING","vendor_product":"oracle:policy_automation"},{"vendor_product":"oracle:policy_automation_connector_for_siebel","cpes":["cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"10.4.6"},{"last_affected":"10.4.6"}],"source":"CPE_STRING"},{"source":"CPE_STRING","vendor_product":"oracle:policy_automation_for_mobile_devices","cpes":["cpe:2.3:a:oracle:policy_automation_for_mobile_devices:10.4.7:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.1.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.10:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.5:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.6:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.7:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.8:*:*:*:*:*:*:*","cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.9:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"10.4.7"},{"last_affected":"10.4.7"},{"introduced":"12.1.0"},{"last_affected":"12.1.0"},{"introduced":"12.1.1"},{"last_affected":"12.1.1"},{"introduced":"12.2.0"},{"last_affected":"12.2.0"},{"introduced":"12.2.1"},{"last_affected":"12.2.1"},{"introduced":"12.2.2"},{"last_affected":"12.2.2"},{"introduced":"12.2.3"},{"last_affected":"12.2.3"},{"introduced":"12.2.4"},{"last_affected":"12.2.4"},{"introduced":"12.2.5"},{"last_affected":"12.2.5"},{"introduced":"12.2.6"},{"last_affected":"12.2.6"},{"introduced":"12.2.7"},{"last_affected":"12.2.7"},{"introduced":"12.2.8"},{"last_affected":"12.2.8"},{"introduced":"12.2.9"},{"last_affected":"12.2.9"},{"introduced":"12.2.10"},{"last_affected":"12.2.10"}]},{"cpes":["cpe:2.3:a:oracle:rapid_planning:12.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:rapid_planning:12.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1"},{"last_affected":"12.1"},{"introduced":"12.2"},{"last_affected":"12.2"}],"source":"CPE_STRING","vendor_product":"oracle:rapid_planning"},{"source":"CPE_STRING","vendor_product":"oracle:retail_advanced_inventory_planning","cpes":["cpe:2.3:a:oracle:retail_advanced_inventory_planning:14.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_advanced_inventory_planning:15.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.0"},{"last_affected":"14.0"},{"introduced":"15.0"},{"last_affected":"15.0"}]},{"source":"CPE_STRING","vendor_product":"oracle:retail_clearance_optimization_engine","cpes":["cpe:2.3:a:oracle:retail_clearance_optimization_engine:14.0.5:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.0.5"},{"last_affected":"14.0.5"}]},{"vendor_product":"oracle:retail_extract_transform_and_load","cpes":["cpe:2.3:a:oracle:retail_extract_transform_and_load:13.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_extract_transform_and_load:13.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_extract_transform_and_load:13.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_extract_transform_and_load:19.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"13.0"},{"last_affected":"13.0"},{"introduced":"13.1"},{"last_affected":"13.1"},{"introduced":"13.2"},{"last_affected":"13.2"},{"introduced":"19.0"},{"last_affected":"19.0"}],"source":"CPE_STRING"},{"extracted_events":[{"introduced":"14.0.0"},{"last_affected":"14.0.0"},{"introduced":"14.1.0"},{"last_affected":"14.1.0"},{"introduced":"15.0"},{"last_affected":"15.0"},{"introduced":"16.0"},{"last_affected":"16.0"}],"source":"CPE_STRING","vendor_product":"oracle:retail_integration_bus","cpes":["cpe:2.3:a:oracle:retail_integration_bus:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_integration_bus:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_integration_bus:15.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_integration_bus:16.0:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:retail_open_commerce_platform:5.3.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_open_commerce_platform:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_open_commerce_platform:6.0.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.3.0"},{"last_affected":"5.3.0"},{"introduced":"6.0.0"},{"last_affected":"6.0.0"},{"introduced":"6.0.1"},{"last_affected":"6.0.1"}],"source":"CPE_STRING","vendor_product":"oracle:retail_open_commerce_platform"},{"source":"CPE_STRING","vendor_product":"oracle:retail_predictive_application_server","cpes":["cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"15.0.3"},{"last_affected":"15.0.3"}]},{"extracted_events":[{"introduced":"14.1"},{"last_affected":"14.1"},{"introduced":"15.0"},{"last_affected":"15.0"},{"introduced":"16.0"},{"last_affected":"16.0"}],"source":"CPE_STRING","vendor_product":"oracle:retail_service_backbone","cpes":["cpe:2.3:a:oracle:retail_service_backbone:14.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_service_backbone:15.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:retail_service_backbone:16.0:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:siebel_ui_framework:18.7:*:*:*:*:*:*:*","cpe:2.3:a:oracle:siebel_ui_framework:18.8:*:*:*:*:*:*:*","cpe:2.3:a:oracle:siebel_ui_framework:18.9:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"18.7"},{"last_affected":"18.7"},{"introduced":"18.8"},{"last_affected":"18.8"},{"introduced":"18.9"},{"last_affected":"18.9"}],"source":"CPE_STRING","vendor_product":"oracle:siebel_ui_framework"},{"vendor_product":"oracle:soa_suite","cpes":["cpe:2.3:a:oracle:soa_suite:12.1.3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:soa_suite:12.2.1.3.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:soa_suite:12.2.2.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.3.0.0"},{"last_affected":"12.1.3.0.0"},{"introduced":"12.2.1.3.0"},{"last_affected":"12.2.1.3.0"},{"introduced":"12.2.2.0.0"},{"last_affected":"12.2.2.0.0"}],"source":"CPE_STRING"},{"vendor_product":"oracle:tape_library_acsls","cpes":["cpe:2.3:a:oracle:tape_library_acsls:8.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.4"},{"last_affected":"8.4"}],"source":"CPE_STRING"},{"cpes":["cpe:2.3:a:oracle:timesten_in-memory_database:11.2.2.8.49:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.2.2.8.49"},{"last_affected":"11.2.2.8.49"}],"source":"CPE_STRING","vendor_product":"oracle:timesten_in-memory_database"},{"source":"CPE_STRING","vendor_product":"oracle:utilities_advanced_spatial_and_operational_analytics","cpes":["cpe:2.3:a:oracle:utilities_advanced_spatial_and_operational_analytics:2.7.0.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.7.0.1"},{"last_affected":"2.7.0.1"}]},{"vendor_product":"oracle:utilities_work_and_asset_management","cpes":["cpe:2.3:a:oracle:utilities_work_and_asset_management:1.9.1.2.12:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.9.1.2.12"},{"last_affected":"1.9.1.2.12"}],"source":"CPE_STRING"},{"cpes":["cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"10.3.6.0.0"},{"last_affected":"10.3.6.0.0"},{"introduced":"12.1.3.0.0"},{"last_affected":"12.1.3.0.0"},{"introduced":"12.2.1.3.0"},{"last_affected":"12.2.1.3.0"},{"introduced":"12.2.1.4.0"},{"last_affected":"12.2.1.4.0"},{"introduced":"14.1.1.0.0"},{"last_affected":"14.1.1.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:weblogic_server"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux:6.7:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux:7.3:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux:7.4:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux:7.5:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux:7.6:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"6.7"},{"last_affected":"6.7"},{"introduced":"7.0"},{"last_affected":"7.0"},{"introduced":"7.3"},{"last_affected":"7.3"},{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"7.5"},{"last_affected":"7.5"},{"introduced":"7.6"},{"last_affected":"7.6"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux"},{"vendor_product":"redhat:enterprise_linux_desktop","cpes":["cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING"},{"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server","cpes":["cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}]},{"extracted_events":[{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"7.6"},{"last_affected":"7.6"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server_aus","cpes":["cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"]},{"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server_eus","cpes":["cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"7.5"},{"last_affected":"7.5"},{"introduced":"7.6"},{"last_affected":"7.6"}]},{"vendor_product":"redhat:enterprise_linux_server_tus","cpes":["cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"7.6"},{"last_affected":"7.6"}],"source":"CPE_STRING"},{"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_workstation","cpes":["cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"]},{"vendor_product":"redhat:fuse","cpes":["cpe:2.3:a:redhat:fuse:1.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.0"},{"last_affected":"1.0"}],"source":"CPE_STRING"}]},"references":[{"type":"WEB","url":"https://lists.apache.org/thread.html/0dcca05274d20ef2d72584edcf8c917bbb13dbbd7eb35cae909d02e9%40%3Cdev.logging.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/277b4b5c2b0e06a825ccec565fa65bd671f35a4d58e3e2ec5d0618e1%40%3Cdev.tika.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/44491fb9cc19acc901f7cff34acb7376619f15638439416e3e14761c%40%3Cdev.tika.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/479471e6debd608c837b9815b76eab24676657d4444fcfd5ef96d6e6%40%3Cdev.tika.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/6114ce566200d76e3cc45c521a62c2c5a4eac15738248f58a99f622c%40%3Cissues.activemq.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/84cc4266238e057b95eb95dfd8b29d46a2592e7672c12c92f68b2917%40%3Cannounce.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/8ab32b4c9f1826f20add7c40be08909de9f58a89dc1de9c09953f5ac%40%3Cissues.activemq.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/e8fb7d76a244ee997ba4b217d6171227f7c2521af8c7c5b16cba27bc%40%3Cdev.logging.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/eea03d504b36e8f870e8321d908e1def1addda16adda04327fe7c125%40%3Cdev.logging.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r0831e2e52a390758ce39a6193f82c11c295175adce6e6307de28c287%40%3Cissues.beam.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r18f1c010b554a3a2d761e8ffffd8674fd4747bcbcf16c643d708318c%40%3Cissues.activemq.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r23369fd603eb6d62d3b883a0a28d12052dcbd1d6d531137124cd7f83%40%3Cgithub.beam.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r2ce8d26154bea939536e6cf27ed02d3192bf5c5d04df885a80fe89b3%40%3Cissues.activemq.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r2ff63f210842a3c5e42f03a35d8f3a345134d073c80a04077341c211%40%3Cissues.activemq.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r3784834e80df2f284577a5596340fb84346c91a2dea6a073e65e3397%40%3Cissues.activemq.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r3a85514a518f3080ab1fc2652cfe122c2ccf67cfb32356acb1b08fe8%40%3Cdev.tika.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r3d666e4e8905157f3c046d31398b04f2bfd4519e31f266de108c6919%40%3Cissues.activemq.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r4b25538be50126194cc646836c718b1a4d8f71bd9c912af5b59134ad%40%3Cdev.tika.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r61590890edcc64140e0c606954b29a063c3d08a2b41d447256d51a78%40%3Cissues.activemq.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r681b4432d0605f327b68b9f8a42662993e699d04614de4851c35ffd1%40%3Cdev.tika.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r746fbc3fc13aee292ae6851f7a5080f592fa3a67b983c6887cdb1fc5%40%3Cdev.tika.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r7bcdc710857725c311b856c0b82cee6207178af5dcde1bd43d289826%40%3Cissues.activemq.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r94b5aae09c4bcff5d06cf641be17b00bd83ba7e10cad737bf16a1b8f%40%3Cgithub.beam.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r9d5c1b558a15d374bd5abd2d3ae3ca7e50e796a0efdcf91e9c5b4cdd%40%3Cgithub.beam.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/ra38785cfc0e7f17f8e24bebf775dd032c033fadcaea29e5bc9fffc60%40%3Cdev.tika.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/ra9a682bc0a8dff1c5cefdef31c7c25f096d9121207cf2d74e2fc563d%40%3Ccommits.logging.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/raedd12dc24412b3780432bf202a2618a21a727788543e5337a458ead%40%3Cissues.activemq.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/rb1b29aee737e1c37fe1d48528cb0febac4f5deed51f5412e6fdfe2bf%40%3Cissues.activemq.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/rbfa7a0742be4981a3f9356a23d0e1a5f2e1eabde32a1a3d8e41420f8%40%3Cgithub.beam.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/rc1eaed7f7d774d5d02f66e49baced31e04827a1293d61a70bd003ca7%40%3Cdev.tika.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/rca24a281000fb681d7e26e5c031a21eb4b0593a7735f781b53dae4e2%40%3Cdev.tika.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/rcbb79023a7c8494cb389cd3d95420fa9e0d531ece0b780b8c1f99422%40%3Ccommits.doris.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/rd5dbeee4808c0f2b9b51479b50de3cc6adb1072c332a200d9107f13e%40%3Cissues.activemq.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/rdbd579dc223f06af826d7de340218ee2f80d8b43fa7e4decb2a63f44%40%3Cgithub.beam.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/rdec0d8ac1f03e6905b0de2df1d5fcdb98b94556e4f6cccf7519fdb26%40%3Cdev.tika.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/re8c21ed9dd218c217d242ffa90778428e446b082b5e1c29f567e8374%40%3Cissues.activemq.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/rf2567488cfc9212b42e34c6393cfa1c14e30e4838b98dda84d71041f%40%3Cdev.tika.apache.org%3E"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2019/12/19/2"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/97702"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1040200"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1041294"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:1417"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:1801"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:1802"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:2423"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:2633"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:2635"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:2636"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:2637"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:2638"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:2808"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:2809"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:2810"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:2811"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:2888"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:2889"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:3244"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:3399"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:3400"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1545"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20180726-0002/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20181107-0002/"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpuapr2020.html"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujan2020.html"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujan2021.html"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujan2022.html"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujul2020.html"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpuoct2020.html"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"type":"REPORT","url":"https://issues.apache.org/jira/browse/LOG4J2-1863"},{"type":"FIX","url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"},{"type":"FIX","url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"},{"type":"FIX","url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"},{"type":"FIX","url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/logging-log4j2","events":[{"introduced":"8d9204a4b4c6016fa6b36513a46502689d6a45c1"},{"fixed":"097426a2154a6079cddd897502b6fb3ce5d50338"}],"database_specific":{"extracted_events":[{"introduced":"2.0"},{"fixed":"2.8.2"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*"}}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-5645.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}