CVE:CVE-2021-40690
CNNVD:CNNVD-202109-1259
Apache Santuario是美国阿帕奇（Apache）基金会的一套实现XML的主要安全标准，它包含两个库：Apache XML Security for Java和Apache XML Security for C++。
Apache Santuario XML Security for Java存在信息泄露漏洞，该漏洞源于软件中的Keyinfo SecureValidation Xpath Transform缺少有效验证。攻击者可利用该漏洞通过该字段读取文件，以获取敏感信息。
solution:Upgrade apache santuario_xml_security_for_java to a higher version than 2.1.7,2.2.3,and avoid the version (,2.1.7),[2.2.0,2.2.3); Upgrade apache cxf to a higher version than 3.4.4,and avoid the version 3.4.4; Upgrade apache tomee to a higher version than 8.0.8,and avoid the version (,8.0.8); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade oracle agile_plm to a higher version than 9.3.6,and avoid the version 9.3.6; Upgrade oracle commerce_guided_search to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle commerce_platform to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle communications_diameter_intelligence_hub to a higher version than 8.1.0,8.2.3,and avoid the version [8.0.0,8.1.0],[8.2.0,8.2.3]; Upgrade oracle communications_messaging_server to a higher version than 8.1,and avoid the version 8.1; Upgrade oracle flexcube_private_banking to a higher version than 12.1.0,and avoid the version 12.1.0; Upgrade oracle outside_in_technology to a higher version than 8.5.5,and avoid the version 8.5.5; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.58,8.59,and avoid the version 8.58,8.59; Upgrade oracle retail_bulk_data_integration to a higher version than 16.0.3,and avoid the version 16.0.3; Upgrade oracle retail_financial_integration to a higher version than 14.1.3.2,15.0.3.1,16.0.3,19.0.1,and avoid the version 14.1.3.2,15.0.3.1,16.0.3,19.0.1; Upgrade oracle retail_integration_bus to a higher version than 14.1.3.2,15.0.3.1,16.0.3,19.0.1,and avoid the version 14.1.3.2,15.0.3.1,16.0.3,19.0.1; Upgrade oracle retail_merchandising_system to a higher version than 16.0.3,19.0.1,and avoid the version 16.0.3,19.0.1; Upgrade oracle retail_service_backbone to a higher version than 14.1.3.2,15.0.3.1,16.0.3,19.0.1,and avoid the version 14.1.3.2,15.0.3.1,16.0.3,19.0.1; Upgrade oracle weblogic_server to a higher version than 12.2.1.4.0,14.1.1.0.0,and avoid the version 12.2.1.4.0,14.1.1.0.0