CVE:CVE-2020-10683
CNNVD:CNNVD-202004-1133
dom4j是一款用于处理XML的开源框架。
dom4j 2.0.3之前版本和2.1.3之前的2.1.x版本中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
solution:Upgrade dom4j_project dom4j to a higher version than 2.0.3,2.1.3,and avoid the version (,2.0.3),[2.1.0,2.1.3); Upgrade oracle agile_plm to a higher version than 9.3.3,9.3.5,and avoid the version 9.3.3,9.3.5; Upgrade oracle application_testing_suite to a higher version than 13.3.0.1,and avoid the version 13.3.0.1; Upgrade oracle banking_platform to a higher version than 2.10.0,and avoid the version [2.4.0,2.10.0]; Upgrade oracle business_process_management_suite to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_application_session_controller to a higher version than 3.9m0p1,and avoid the version 3.9m0p1; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.2.2,and avoid the version [8.0.0,8.2.2]; Upgrade oracle communications_unified_inventory_management to a higher version than 7.3.0,7.4.0,and avoid the version 7.3.0,7.4.0; Upgrade oracle data_integrator to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle documaker to a higher version than 12.6.4,and avoid the version [12.6.0,12.6.4]; Upgrade oracle endeca_information_discovery_integrator to a higher version than 3.2.0,and avoid the version 3.2.0; Upgrade oracle enterprise_data_quality to a higher version than 11.1.1.9.0,12.2.1.3.0,and avoid the version 11.1.1.9.0,12.2.1.3.0; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.4.0.0,and avoid the version 13.4.0.0; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.1.0,and avoid the version [8.0.6,8.1.0]; Upgrade oracle flexcube_core_banking to a higher version than 11.7.0,11.8.0,11.9.0,11.10.0,and avoid the version 11.7.0,11.8.0,11.9.0,11.10.0; Upgrade oracle fusion_middleware to a higher version than 12.2.1.4.0,and avoid the version 12.2.1.4.0; Upgrade oracle health_sciences_empirica_signal to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle health_sciences_information_manager to a higher version than 3.0.1,and avoid the version 3.0.1; Upgrade oracle insurance_policy_administration_j2ee to a higher version than 11.3.0,10.2.0,10.2.4,11.0.2,and avoid the version [11.1.0,11.3.0],10.2.0,10.2.4,11.0.2; Upgrade oracle insurance_rules_palette to a higher version than 11.3.0,10.2.0,10.2.4,11.0.2,and avoid the version [11.1.0,11.3.0],10.2.0,10.2.4,11.0.2; Upgrade oracle jdeveloper to a higher version than 12.2.1.4.0,and avoid the version 12.2.1.4.0; Upgrade oracle primavera_p6_enterprise_project_portfolio_management to a higher version than 16.2.20.1,17.12.17.1,18.8.19.0,19.12.6.0,and avoid the version [16.1.0.0,16.2.20.1],[17.1.0.0,17.12.17.1],[18.1.0.0,18.8.19.0],[19.12.0.0,19.12.6.0]; Upgrade oracle rapid_planning to a higher version than 12.1,12.2,and avoid the version 12.1,12.2; Upgrade oracle retail_customer_management_and_segmentation_foundation to a higher version than 16.0,17.0,18.0,19.0,and avoid the version 16.0,17.0,18.0,19.0; Upgrade oracle retail_integration_bus to a higher version than 15.0,16.0,and avoid the version 15.0,16.0; Upgrade oracle retail_order_broker to a higher version than 15.0,16.0,18.0,19.0,19.1,and avoid the version 15.0,16.0,18.0,19.0,19.1; Upgrade oracle retail_price_management to a higher version than 14.0.3,14.1.3.0,15.0.3.0,16.0.3.0,and avoid the version 14.0.3,14.1.3.0,15.0.3.0,16.0.3.0; Upgrade oracle retail_xstore_point_of_service to a higher version than 15.0.4,16.0.6,17.0.4,18.0.3,and avoid the version 15.0.4,16.0.6,17.0.4,18.0.3; Upgrade oracle storagetek_tape_analytics_sw_tool to a higher version than 2.3,and avoid the version 2.3; Upgrade oracle utilities_framework to a higher version than 4.3.0.6.0,2.2.0.0.0,4.2.0.2.0,4.2.0.3.0,4.4.0.0.0,4.4.0.2.0,and avoid the version [4.3.0.1.0,4.3.0.6.0],2.2.0.0.0,4.2.0.2.0,4.2.0.3.0,4.4.0.0.0,4.4.0.2.0; Upgrade oracle webcenter_portal to a higher version than 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade netapp oncommand_api_services to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snap_creator_framework to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade canonical ubuntu_linux to a higher version than 16.04,and avoid the version 16.04