CVE:CVE-2020-1953
CNNVD:CNNVD-202003-821
Apache Commons Configuration是美国阿帕奇（Apache）基金会的一款通用的配置接口，它主要用于使Java应用程序从多种来源读取配置数据。
Apache Commons Configuration中存在输入验证错误漏洞。攻击者可利用该漏洞在主机应用程序的控制范围之外加载并执行代码。
solution:Upgrade apache commons_configuration to a higher version than 2.2,2.3,2.4,2.5,2.6,and avoid the version 2.2,2.3,2.4,2.5,2.6; Upgrade oracle database_server to a higher version than 11.2.0.4,12.1.0.2,12.2.0.1,18c,19c,and avoid the version 11.2.0.4,12.1.0.2,12.2.0.1,18c,19c; Upgrade oracle healthcare_foundation to a higher version than 7.1.1,7.2.0,7.2.1,7.3.0,and avoid the version 7.1.1,7.2.0,7.2.1,7.3.0