{ "reportSchema": "1.1", "scanInfo": { "engineVersion": "13.0.0", "dataSource": [ ] }, "projectInfo": { "name": "java-maven", "reportDate": "2026-10-13T21:29:49.246492Z", "credits": { "NVD": "This product uses the NVD API but is not endorsed or certified by the NVD. This report contains data retrieved from the National Vulnerability Database: https://nvd.nist.gov", "CISA": "This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "NPM": "This report may contain data retrieved from the Github Advisory Database (via NPM Audit API): https://github.com/advisories/", "RETIREJS": "This report may contain data retrieved from the RetireJS community: https://retirejs.github.io/retire.js/", "OSSINDEX": "This report may contain data retrieved from the Sonatype Guide OSS Index API: https://www.sonatype.com/products/sonatype-guide/oss-index-users" } }, "dependencies": [ { "isVirtual": false, "fileName": "checker-qual-3.43.0.jar", "filePath": "~\/projects\/sca-benchmark-wt\/refresh\/results\/public\/raw\/java-maven__dc-jars\/checker-qual-3.43.0.jar" ,"md5": "4f56e65c8f302ca8b4cb384c9b4a53b6", "sha1": "9425eee39e56b116d2b998b7c2cebcbd11a3c98b", "sha256": "3fbc2e98f05854c3df16df9abaa955b91b15b3ecac33623208ed6424640ef0f6","description": "checker-qual contains annotations (type qualifiers) that a programmer\nwrites to specify Java code for type-checking by the Checker Framework.\n","license": "The MIT License: http:\/\/opensource.org\/licenses\/MIT" ,"evidenceCollected": { "vendorEvidence": [ { "type": "vendor", "confidence": "HIGHEST", "source": "central", "name": "artifactid", "value": "checker-qual" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "central", "name": "groupid", "value": "org.checkerframework" } ,{ "type": "vendor", "confidence": "HIGH", "source": "file", "name": "name", "value": "checker-qual" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "checker" } ,{ "type": "vendor", "confidence": "LOW", "source": "jar", "name": "package name", "value": "checker" } ,{ "type": "vendor", "confidence": "LOW", "source": "jar", "name": "package name", "value": "checkerframework" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "qual" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "checker-qual" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "implementation-url", "value": "https:\/\/checkerframework.org" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "artifactid", "value": "checker-qual" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "mernst@cs.washington.edu" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "smillst@cs.washington.edu" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "mernst" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "smillst" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Michael Ernst" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Suzanne Millstein" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer org", "value": "University of Washington" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer org URL", "value": "https:\/\/www.cs.washington.edu\/" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "org.checkerframework" } ,{ "type": "vendor", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Checker Qual" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "url", "value": "https:\/\/checkerframework.org\/" } ], "productEvidence": [ { "type": "product", "confidence": "HIGHEST", "source": "central", "name": "artifactid", "value": "checker-qual" } ,{ "type": "product", "confidence": "HIGH", "source": "file", "name": "name", "value": "checker-qual" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "checker" } ,{ "type": "product", "confidence": "LOW", "source": "jar", "name": "package name", "value": "checker" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "checkerframework" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "qual" } ,{ "type": "product", "confidence": "LOW", "source": "jar", "name": "package name", "value": "qual" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "Bundle-Name", "value": "checker-qual" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "checker-qual" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "implementation-url", "value": "https:\/\/checkerframework.org" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "artifactid", "value": "checker-qual" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "mernst@cs.washington.edu" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "smillst@cs.washington.edu" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "mernst" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "smillst" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Michael Ernst" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Suzanne Millstein" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer org", "value": "University of Washington" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer org URL", "value": "https:\/\/www.cs.washington.edu\/" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "org.checkerframework" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Checker Qual" } ,{ "type": "product", "confidence": "MEDIUM", "source": "pom", "name": "url", "value": "https:\/\/checkerframework.org\/" } ], "versionEvidence": [ { "type": "version", "confidence": "HIGHEST", "source": "central", "name": "version", "value": "3.43.0" } , { "type": "version", "confidence": "HIGH", "source": "file", "name": "version", "value": "3.43.0" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Bundle-Version", "value": "3.43.0" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Version", "value": "3.43.0" } , { "type": "version", "confidence": "HIGHEST", "source": "pom", "name": "version", "value": "3.43.0" } ] } ,"packages": [ { "id": "pkg:maven\/org.checkerframework\/checker-qual@3.43.0" ,"confidence": "HIGH" } ] },{ "isVirtual": false, "fileName": "commons-lang3-3.17.0.jar", "filePath": "~\/projects\/sca-benchmark-wt\/refresh\/results\/public\/raw\/java-maven__dc-jars\/commons-lang3-3.17.0.jar" ,"md5": "7730df72b7fdff4a3a32d89a314f826a", "sha1": "b17d2136f0460dcc0d2016ceefca8723bdf4ee70", "sha256": "6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4","description": "\n Apache Commons Lang, a package of Java utility classes for the\n classes that are in java.lang's hierarchy, or are considered to be so\n standard as to justify existence in java.lang.\n\n The code is tested using the latest revision of the JDK for supported\n LTS releases: 8, 11, 17 and 21 currently.\n See https:\/\/github.com\/apache\/commons-lang\/blob\/master\/.github\/workflows\/maven.yml\n \n Please ensure your build environment is up-to-date and kindly report any build issues.\n ","license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt" ,"evidenceCollected": { "vendorEvidence": [ { "type": "vendor", "confidence": "HIGH", "source": "file", "name": "name", "value": "commons-lang3" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "apache" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "commons" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "lang3" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "automatic-module-name", "value": "org.apache.commons.lang3" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "build-jdk-spec", "value": "17" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/commons.apache.org\/proper\/commons-lang\/" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "org.apache.commons.lang3" } ,{ "type": "vendor", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Vendor", "value": "The Apache Software Foundation" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "multi-release", "value": "true" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "specification-vendor", "value": "The Apache Software Foundation" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "artifactid", "value": "commons-lang3" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "bayard@apache.org" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "britter@apache.org" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "chtompki@apache.org" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "djones@apache.org" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "dlr@finemaltcoding.com" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "ggregory at apache.org" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "jcarman@apache.org" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "joerg.schaible@gmx.de" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "lguibert@apache.org" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "oheger@apache.org" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "pbenedict@apache.org" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "rdonkin@apache.org" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "scolebourne@joda.org" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "stevencaswell@apache.org" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "bayard" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "britter" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "chtompki" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "djones" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "dlr" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "fredrik" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "ggregory" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "jcarman" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "joehni" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "lguibert" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "mbenson" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "niallp" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "oheger" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "pbenedict" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "rdonkin" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "scaswell" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "scolebourne" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Benedikt Ritter" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Daniel Rall" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Duncan Jones" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Fredrik Westermarck" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Gary Gregory" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Henri Yandell" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "James Carman" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Joerg Schaible" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Loic Guibert" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Matt Benson" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Niall Pemberton" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Oliver Heger" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Paul Benedict" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Rob Tompkins" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Robert Burrell Donkin" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Stephen Colebourne" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Steven Caswell" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer org", "value": "Carman Consulting, Inc." } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer org", "value": "CollabNet, Inc." } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer org", "value": "SITA ATS Ltd" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer org", "value": "The Apache Software Foundation" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer org URL", "value": "https:\/\/www.apache.org\/" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "org.apache.commons" } ,{ "type": "vendor", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Apache Commons Lang" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "parent-artifactid", "value": "commons-parent" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "url", "value": "https:\/\/commons.apache.org\/proper\/commons-lang\/" } ], "productEvidence": [ { "type": "product", "confidence": "HIGH", "source": "file", "name": "name", "value": "commons-lang3" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "apache" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "commons" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "lang3" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "automatic-module-name", "value": "org.apache.commons.lang3" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "build-jdk-spec", "value": "17" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/commons.apache.org\/proper\/commons-lang\/" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "Bundle-Name", "value": "Apache Commons Lang" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "org.apache.commons.lang3" } ,{ "type": "product", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Title", "value": "Apache Commons Lang" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "multi-release", "value": "true" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "specification-title", "value": "Apache Commons Lang" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "artifactid", "value": "commons-lang3" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "bayard@apache.org" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "britter@apache.org" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "chtompki@apache.org" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "djones@apache.org" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "dlr@finemaltcoding.com" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "ggregory at apache.org" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "jcarman@apache.org" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "joerg.schaible@gmx.de" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "lguibert@apache.org" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "oheger@apache.org" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "pbenedict@apache.org" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "rdonkin@apache.org" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "scolebourne@joda.org" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "stevencaswell@apache.org" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "bayard" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "britter" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "chtompki" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "djones" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "dlr" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "fredrik" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "ggregory" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "jcarman" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "joehni" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "lguibert" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "mbenson" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "niallp" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "oheger" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "pbenedict" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "rdonkin" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "scaswell" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "scolebourne" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Benedikt Ritter" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Daniel Rall" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Duncan Jones" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Fredrik Westermarck" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Gary Gregory" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Henri Yandell" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "James Carman" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Joerg Schaible" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Loic Guibert" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Matt Benson" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Niall Pemberton" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Oliver Heger" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Paul Benedict" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Rob Tompkins" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Robert Burrell Donkin" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Stephen Colebourne" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Steven Caswell" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer org", "value": "Carman Consulting, Inc." } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer org", "value": "CollabNet, Inc." } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer org", "value": "SITA ATS Ltd" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer org", "value": "The Apache Software Foundation" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer org URL", "value": "https:\/\/www.apache.org\/" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "org.apache.commons" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Apache Commons Lang" } ,{ "type": "product", "confidence": "MEDIUM", "source": "pom", "name": "parent-artifactid", "value": "commons-parent" } ,{ "type": "product", "confidence": "MEDIUM", "source": "pom", "name": "url", "value": "https:\/\/commons.apache.org\/proper\/commons-lang\/" } ], "versionEvidence": [ { "type": "version", "confidence": "HIGH", "source": "file", "name": "version", "value": "3.17.0" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Bundle-Version", "value": "3.17.0" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Version", "value": "3.17.0" } , { "type": "version", "confidence": "LOW", "source": "pom", "name": "parent-version", "value": "3.17.0" } , { "type": "version", "confidence": "HIGHEST", "source": "pom", "name": "version", "value": "3.17.0" } ] } ,"packages": [ { "id": "pkg:maven\/org.apache.commons\/commons-lang3@3.17.0" ,"confidence": "HIGH" } ] },{ "isVirtual": false, "fileName": "error_prone_annotations-2.28.0.jar", "filePath": "~\/projects\/sca-benchmark-wt\/refresh\/results\/public\/raw\/java-maven__dc-jars\/error_prone_annotations-2.28.0.jar" ,"md5": "9e5d2181ddb6acb58fe08e86198c4232", "sha1": "59fc00087ce372de42e394d2c789295dff2d19f0", "sha256": "f3fc8a3a0a4020706a373b00e7f57c2512dd26d1f83d28c7d38768f8682b231e","description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.","license": "Apache 2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt" ,"evidenceCollected": { "vendorEvidence": [ { "type": "vendor", "confidence": "HIGH", "source": "file", "name": "name", "value": "error_prone_annotations" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "annotations" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "errorprone" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "google" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "build-jdk-spec", "value": "17" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/errorprone.info\/error_prone_annotations" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "com.google.errorprone.annotations" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "multi-release", "value": "true" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "artifactid", "value": "error_prone_annotations" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.google.errorprone" } ,{ "type": "vendor", "confidence": "HIGH", "source": "pom", "name": "name", "value": "error-prone annotations" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "parent-artifactid", "value": "error_prone_parent" } ], "productEvidence": [ { "type": "product", "confidence": "HIGH", "source": "file", "name": "name", "value": "error_prone_annotations" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "annotations" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "errorprone" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "google" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "build-jdk-spec", "value": "17" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/errorprone.info\/error_prone_annotations" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "Bundle-Name", "value": "error-prone annotations" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "com.google.errorprone.annotations" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "multi-release", "value": "true" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "artifactid", "value": "error_prone_annotations" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.google.errorprone" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "name", "value": "error-prone annotations" } ,{ "type": "product", "confidence": "MEDIUM", "source": "pom", "name": "parent-artifactid", "value": "error_prone_parent" } ], "versionEvidence": [ { "type": "version", "confidence": "HIGH", "source": "file", "name": "version", "value": "2.28.0" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Bundle-Version", "value": "2.28.0" } , { "type": "version", "confidence": "HIGHEST", "source": "pom", "name": "version", "value": "2.28.0" } ] } ,"packages": [ { "id": "pkg:maven\/com.google.errorprone\/error_prone_annotations@2.28.0" ,"confidence": "HIGH" } ] },{ "isVirtual": false, "fileName": "failureaccess-1.0.2.jar", "filePath": "~\/projects\/sca-benchmark-wt\/refresh\/results\/public\/raw\/java-maven__dc-jars\/failureaccess-1.0.2.jar" ,"md5": "3f75955b49b6758fd6d1e1bd9bf777b3", "sha1": "c4a06a64e650562f30b7bf9aaec1bfed43aca12b", "sha256": "8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064","description": "\n Contains\n com.google.common.util.concurrent.internal.InternalFutureFailureAccess and\n InternalFutures. Most users will never need to use this artifact. Its\n classes are conceptually a part of Guava, but they're in this separate\n artifact so that Android libraries can use them without pulling in all of\n Guava (just as they can use ListenableFuture by depending on the\n listenablefuture artifact).\n ","license": "http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt" ,"evidenceCollected": { "vendorEvidence": [ { "type": "vendor", "confidence": "HIGH", "source": "file", "name": "name", "value": "failureaccess" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "common" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "concurrent" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "google" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "util" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "automatic-module-name", "value": "com.google.common.util.concurrent.internal" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "build-jdk-spec", "value": "11" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/github.com\/google\/guava\/" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "com.google.guava.failureaccess" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "artifactid", "value": "failureaccess" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.google.guava" } ,{ "type": "vendor", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Guava InternalFutureFailureAccess and InternalFutures" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "parent-artifactid", "value": "guava-parent" } ], "productEvidence": [ { "type": "product", "confidence": "HIGH", "source": "file", "name": "name", "value": "failureaccess" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "common" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "concurrent" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "google" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "util" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "automatic-module-name", "value": "com.google.common.util.concurrent.internal" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "build-jdk-spec", "value": "11" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/github.com\/google\/guava\/" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "Bundle-Name", "value": "Guava InternalFutureFailureAccess and InternalFutures" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "com.google.guava.failureaccess" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "artifactid", "value": "failureaccess" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.google.guava" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Guava InternalFutureFailureAccess and InternalFutures" } ,{ "type": "product", "confidence": "MEDIUM", "source": "pom", "name": "parent-artifactid", "value": "guava-parent" } ], "versionEvidence": [ { "type": "version", "confidence": "HIGH", "source": "file", "name": "version", "value": "1.0.2" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Bundle-Version", "value": "1.0.2" } , { "type": "version", "confidence": "LOW", "source": "pom", "name": "parent-version", "value": "1.0.2" } , { "type": "version", "confidence": "HIGHEST", "source": "pom", "name": "version", "value": "1.0.2" } ] } ,"packages": [ { "id": "pkg:maven\/com.google.guava\/failureaccess@1.0.2" ,"confidence": "HIGH" } ] },{ "isVirtual": false, "fileName": "guava-33.3.1-jre.jar", "filePath": "~\/projects\/sca-benchmark-wt\/refresh\/results\/public\/raw\/java-maven__dc-jars\/guava-33.3.1-jre.jar" ,"md5": "7b7d80d99af4181db55b00dad50a91bb", "sha1": "852f8b363da0111e819460021ca693cacca3e8db", "sha256": "4bf0e2c5af8e4525c96e8fde17a4f7307f97f8478f11c4c8e35a0e3298ae4e90","description": "\n Guava is a suite of core and expanded libraries that include\n utility classes, Google's collections, I\/O classes, and\n much more.\n ","license": "http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt" ,"evidenceCollected": { "vendorEvidence": [ { "type": "vendor", "confidence": "HIGH", "source": "file", "name": "name", "value": "guava" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "common" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "google" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "automatic-module-name", "value": "com.google.common" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "build-jdk-spec", "value": "11" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/github.com\/google\/guava\/" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "com.google.guava" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "artifactid", "value": "guava" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.google.guava" } ,{ "type": "vendor", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Guava: Google Core Libraries for Java" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "parent-artifactid", "value": "guava-parent" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "url", "value": "google\/guava" } ], "productEvidence": [ { "type": "product", "confidence": "HIGH", "source": "file", "name": "name", "value": "guava" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "common" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "google" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "automatic-module-name", "value": "com.google.common" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "build-jdk-spec", "value": "11" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/github.com\/google\/guava\/" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "Bundle-Name", "value": "Guava: Google Core Libraries for Java" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "com.google.guava" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "artifactid", "value": "guava" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.google.guava" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Guava: Google Core Libraries for Java" } ,{ "type": "product", "confidence": "MEDIUM", "source": "pom", "name": "parent-artifactid", "value": "guava-parent" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "url", "value": "google\/guava" } ], "versionEvidence": [ { "type": "version", "confidence": "HIGHEST", "source": "pom", "name": "version", "value": "33.3.1-jre" } ] } ,"packages": [ { "id": "pkg:maven\/com.google.guava\/guava@33.3.1-jre" ,"confidence": "HIGH" } ] ,"vulnerabilityIds": [ { "id": "cpe:2.3:a:google:guava:33.3.1:*:*:*:*:*:*:*" ,"confidence": "HIGHEST","url": "https:\/\/nvd.nist.gov\/vuln\/search#\/nvd\/home?sortOrder=3&sortDirection=2&cpeFilterMode=applicability&resultType=records&cpeName=cpe%3A2.3%3Aa%3Agoogle%3Aguava%3A33.3.1%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A" } ] },{ "isVirtual": false, "fileName": "j2objc-annotations-3.0.0.jar", "filePath": "~\/projects\/sca-benchmark-wt\/refresh\/results\/public\/raw\/java-maven__dc-jars\/j2objc-annotations-3.0.0.jar" ,"md5": "f59529b29202a5baf37f491ea5ec8627", "sha1": "7399e65dd7e9ff3404f4535b2f017093bdb134c7", "sha256": "88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64","description": "\n A set of annotations that provide additional information to the J2ObjC\n translator to modify the result of translation.\n ","license": "Apache License, Version 2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt" ,"evidenceCollected": { "vendorEvidence": [ { "type": "vendor", "confidence": "HIGH", "source": "file", "name": "name", "value": "j2objc-annotations" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "annotations" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "google" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "j2objc" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "build-jdk-spec", "value": "11" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "multi-release", "value": "true" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "artifactid", "value": "j2objc-annotations" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "tball@google.com" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer id", "value": "tomball" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer name", "value": "Tom Ball" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer org", "value": "Google" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "developer org URL", "value": "https:\/\/www.google.com" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.google.j2objc" } ,{ "type": "vendor", "confidence": "HIGH", "source": "pom", "name": "name", "value": "J2ObjC Annotations" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "url", "value": "google\/j2objc\/" } ], "productEvidence": [ { "type": "product", "confidence": "HIGH", "source": "file", "name": "name", "value": "j2objc-annotations" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "annotations" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "google" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "j2objc" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "build-jdk-spec", "value": "11" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "multi-release", "value": "true" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "artifactid", "value": "j2objc-annotations" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer email", "value": "tball@google.com" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer id", "value": "tomball" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer name", "value": "Tom Ball" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer org", "value": "Google" } ,{ "type": "product", "confidence": "LOW", "source": "pom", "name": "developer org URL", "value": "https:\/\/www.google.com" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.google.j2objc" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "name", "value": "J2ObjC Annotations" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "url", "value": "google\/j2objc\/" } ], "versionEvidence": [ { "type": "version", "confidence": "HIGH", "source": "file", "name": "version", "value": "3.0.0" } , { "type": "version", "confidence": "HIGHEST", "source": "pom", "name": "version", "value": "3.0.0" } ] } ,"packages": [ { "id": "pkg:maven\/com.google.j2objc\/j2objc-annotations@3.0.0" ,"confidence": "HIGH" } ] },{ "isVirtual": false, "fileName": "jackson-core-2.18.2.jar", "filePath": "~\/projects\/sca-benchmark-wt\/refresh\/results\/public\/raw\/java-maven__dc-jars\/jackson-core-2.18.2.jar" ,"md5": "bf935e6eca3a57defa13918661905cb0", "sha1": "fb64ccac5c27dca8819418eb4e443a9f496d9ee7", "sha256": "d8054ae7c0d1c2d2f55d28e46026ebe5892881f3fab5f439233184381c3b4a1f","description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON","license": "The Apache Software License, Version 2.0: https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt" ,"relatedDependencies": [ { "isVirtual": false, "fileName": "jackson-annotations-2.18.2.jar", "filePath": "~\/projects\/sca-benchmark-wt\/refresh\/results\/public\/raw\/java-maven__dc-jars\/jackson-annotations-2.18.2.jar" ,"sha256": "581bd61000ef7648943f781ca05689e56d03f6052748365a8e2b3a9b5d3fa32f", "sha1": "985d77751ebc7fce5db115a986bc9aa82f973f4a", "md5": "79d38d3c51068a2bbc40268d02f80763", "packageIds": [ { "id": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2" } ] } ] ,"evidenceCollected": { "vendorEvidence": [ { "type": "vendor", "confidence": "HIGH", "source": "file", "name": "name", "value": "jackson-core" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "base" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "com" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "core" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "fasterxml" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "jackson" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "json" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "build-jdk-spec", "value": "1.8" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/github.com\/FasterXML\/jackson-core" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "com.fasterxml.jackson.core.jackson-core" } ,{ "type": "vendor", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Vendor", "value": "FasterXML" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "Implementation-Vendor-Id", "value": "com.fasterxml.jackson.core" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "multi-release", "value": "true" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "specification-vendor", "value": "FasterXML" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "artifactid", "value": "jackson-core" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.fasterxml.jackson.core" } ,{ "type": "vendor", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Jackson-core" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "parent-artifactid", "value": "jackson-base" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "parent-groupid", "value": "com.fasterxml.jackson" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "url", "value": "FasterXML\/jackson-core" } ], "productEvidence": [ { "type": "product", "confidence": "HIGH", "source": "file", "name": "name", "value": "jackson-core" } ,{ "type": "product", "confidence": "HIGHEST", "source": "hint analyzer", "name": "product", "value": "java8" } ,{ "type": "product", "confidence": "HIGHEST", "source": "hint analyzer", "name": "product", "value": "modules" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "base" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "com" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "core" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "fasterxml" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "jackson" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "json" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "build-jdk-spec", "value": "1.8" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/github.com\/FasterXML\/jackson-core" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "Bundle-Name", "value": "Jackson-core" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "com.fasterxml.jackson.core.jackson-core" } ,{ "type": "product", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Title", "value": "Jackson-core" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "multi-release", "value": "true" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "specification-title", "value": "Jackson-core" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "artifactid", "value": "jackson-core" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.fasterxml.jackson.core" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Jackson-core" } ,{ "type": "product", "confidence": "MEDIUM", "source": "pom", "name": "parent-artifactid", "value": "jackson-base" } ,{ "type": "product", "confidence": "MEDIUM", "source": "pom", "name": "parent-groupid", "value": "com.fasterxml.jackson" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "url", "value": "FasterXML\/jackson-core" } ], "versionEvidence": [ { "type": "version", "confidence": "HIGH", "source": "file", "name": "version", "value": "2.18.2" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Bundle-Version", "value": "2.18.2" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Version", "value": "2.18.2" } , { "type": "version", "confidence": "HIGHEST", "source": "pom", "name": "version", "value": "2.18.2" } ] } ,"packages": [ { "id": "pkg:maven\/com.fasterxml.jackson.core\/jackson-core@2.18.2" ,"confidence": "HIGH" } ] ,"vulnerabilityIds": [ { "id": "cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.2:*:*:*:*:*:*:*" ,"confidence": "LOW" } ] },{ "isVirtual": false, "fileName": "jackson-databind-2.18.2.jar", "filePath": "~\/projects\/sca-benchmark-wt\/refresh\/results\/public\/raw\/java-maven__dc-jars\/jackson-databind-2.18.2.jar" ,"md5": "1b56887bcd3eaea1ff710eb673e610b0", "sha1": "deef8697b92141fb6caf7aa86966cff4eec9b04f", "sha256": "4b364e6850dc89172fcf1d4dd26b8ff5488eda44ff4657e22dd265203dd5ab3c","description": "General data-binding functionality for Jackson: works on core streaming API","license": "The Apache Software License, Version 2.0: https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt" ,"evidenceCollected": { "vendorEvidence": [ { "type": "vendor", "confidence": "HIGH", "source": "file", "name": "name", "value": "jackson-databind" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "databind" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "fasterxml" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "jackson" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "build-jdk-spec", "value": "1.8" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/github.com\/FasterXML\/jackson" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "com.fasterxml.jackson.core.jackson-databind" } ,{ "type": "vendor", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Vendor", "value": "FasterXML" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "Implementation-Vendor-Id", "value": "com.fasterxml.jackson.core" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "multi-release", "value": "true" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "specification-vendor", "value": "FasterXML" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "artifactid", "value": "jackson-databind" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.fasterxml.jackson.core" } ,{ "type": "vendor", "confidence": "HIGH", "source": "pom", "name": "name", "value": "jackson-databind" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "parent-artifactid", "value": "jackson-base" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "pom", "name": "parent-groupid", "value": "com.fasterxml.jackson" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "url", "value": "FasterXML\/jackson" } ], "productEvidence": [ { "type": "product", "confidence": "HIGH", "source": "file", "name": "name", "value": "jackson-databind" } ,{ "type": "product", "confidence": "HIGHEST", "source": "hint analyzer", "name": "product", "value": "java8" } ,{ "type": "product", "confidence": "HIGHEST", "source": "hint analyzer", "name": "product", "value": "modules" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "databind" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "fasterxml" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "jackson" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "build-jdk-spec", "value": "1.8" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/github.com\/FasterXML\/jackson" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "Bundle-Name", "value": "jackson-databind" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "com.fasterxml.jackson.core.jackson-databind" } ,{ "type": "product", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Title", "value": "jackson-databind" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "multi-release", "value": "true" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "specification-title", "value": "jackson-databind" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "artifactid", "value": "jackson-databind" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.fasterxml.jackson.core" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "name", "value": "jackson-databind" } ,{ "type": "product", "confidence": "MEDIUM", "source": "pom", "name": "parent-artifactid", "value": "jackson-base" } ,{ "type": "product", "confidence": "MEDIUM", "source": "pom", "name": "parent-groupid", "value": "com.fasterxml.jackson" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "url", "value": "FasterXML\/jackson" } ], "versionEvidence": [ { "type": "version", "confidence": "HIGH", "source": "file", "name": "version", "value": "2.18.2" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Bundle-Version", "value": "2.18.2" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Version", "value": "2.18.2" } , { "type": "version", "confidence": "HIGHEST", "source": "pom", "name": "version", "value": "2.18.2" } ] } ,"packages": [ { "id": "pkg:maven\/com.fasterxml.jackson.core\/jackson-databind@2.18.2" ,"confidence": "HIGH" } ] ,"vulnerabilityIds": [ { "id": "cpe:2.3:a:fasterxml:jackson-databind:2.18.2:*:*:*:*:*:*:*" ,"confidence": "HIGHEST","url": "https:\/\/nvd.nist.gov\/vuln\/search#\/nvd\/home?sortOrder=3&sortDirection=2&cpeFilterMode=applicability&resultType=records&cpeName=cpe%3A2.3%3Aa%3Afasterxml%3Ajackson-databind%3A2.18.2%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A" } , { "id": "cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.2:*:*:*:*:*:*:*" ,"confidence": "LOW" } ] },{ "isVirtual": false, "fileName": "jsr305-3.0.2.jar", "filePath": "~\/projects\/sca-benchmark-wt\/refresh\/results\/public\/raw\/java-maven__dc-jars\/jsr305-3.0.2.jar" ,"md5": "dd83accb899363c32b07d7a1b2e4ce40", "sha1": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d", "sha256": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7","description": "JSR305 Annotations for Findbugs","license": "The Apache Software License, Version 2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt" ,"evidenceCollected": { "vendorEvidence": [ { "type": "vendor", "confidence": "HIGH", "source": "file", "name": "name", "value": "jsr305" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "org.jsr-305" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "artifactid", "value": "jsr305" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.google.code.findbugs" } ,{ "type": "vendor", "confidence": "HIGH", "source": "pom", "name": "name", "value": "FindBugs-jsr305" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "url", "value": "http:\/\/findbugs.sourceforge.net\/" } ], "productEvidence": [ { "type": "product", "confidence": "HIGH", "source": "file", "name": "name", "value": "jsr305" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "Bundle-Name", "value": "FindBugs-jsr305" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "org.jsr-305" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "artifactid", "value": "jsr305" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.google.code.findbugs" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "name", "value": "FindBugs-jsr305" } ,{ "type": "product", "confidence": "MEDIUM", "source": "pom", "name": "url", "value": "http:\/\/findbugs.sourceforge.net\/" } ], "versionEvidence": [ { "type": "version", "confidence": "HIGH", "source": "file", "name": "version", "value": "3.0.2" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Bundle-Version", "value": "3.0.2" } , { "type": "version", "confidence": "HIGHEST", "source": "pom", "name": "version", "value": "3.0.2" } ] } ,"packages": [ { "id": "pkg:maven\/com.google.code.findbugs\/jsr305@3.0.2" ,"confidence": "HIGH" } ] },{ "isVirtual": false, "fileName": "listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar", "filePath": "~\/projects\/sca-benchmark-wt\/refresh\/results\/public\/raw\/java-maven__dc-jars\/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar" ,"md5": "d094c22570d65e132c19cea5d352e381", "sha1": "b421526c5f297295adef1c886e5246c39d4ac629", "sha256": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99","description": "\n An empty artifact that Guava depends on to signal that it is providing\n ListenableFuture -- but is also available in a second \"version\" that\n contains com.google.common.util.concurrent.ListenableFuture class, without\n any other Guava classes. The idea is:\n\n - If users want only ListenableFuture, they depend on listenablefuture-1.0.\n\n - If users want all of Guava, they depend on guava, which, as of Guava\n 27.0, depends on\n listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...\n version number is enough for some build systems (notably, Gradle) to select\n that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a\n conflict with the copy of ListenableFuture in guava itself. If users are\n using an older version of Guava or a build system other than Gradle, they\n may see class conflicts. If so, they can solve them by manually excluding\n the listenablefuture artifact or manually forcing their build systems to\n use 9999.0-....\n " ,"evidenceCollected": { "vendorEvidence": [ { "type": "vendor", "confidence": "HIGH", "source": "file", "name": "name", "value": "listenablefuture" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "artifactid", "value": "listenablefuture" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.google.guava" } ,{ "type": "vendor", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Guava ListenableFuture only" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "parent-artifactid", "value": "guava-parent" } ], "productEvidence": [ { "type": "product", "confidence": "HIGH", "source": "file", "name": "name", "value": "listenablefuture" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "artifactid", "value": "listenablefuture" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "com.google.guava" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Guava ListenableFuture only" } ,{ "type": "product", "confidence": "MEDIUM", "source": "pom", "name": "parent-artifactid", "value": "guava-parent" } ], "versionEvidence": [ { "type": "version", "confidence": "LOW", "source": "pom", "name": "parent-version", "value": "9999.0-empty-to-avoid-conflict-with-guava" } , { "type": "version", "confidence": "HIGHEST", "source": "pom", "name": "version", "value": "9999.0-empty-to-avoid-conflict-with-guava" } ] } ,"packages": [ { "id": "pkg:maven\/com.google.guava\/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava" ,"confidence": "HIGH" } ] },{ "isVirtual": false, "fileName": "log4j-api-2.14.1.jar", "filePath": "~\/projects\/sca-benchmark-wt\/refresh\/results\/public\/raw\/java-maven__dc-jars\/log4j-api-2.14.1.jar" ,"md5": "6f31a3b90c3eb09fb0dc0aef155a001c", "sha1": "cd8858fbbde69f46bce8db1152c18a43328aae78", "sha256": "8caf58db006c609949a0068110395a33067a2bad707c3da35e959c0473f9a916","description": "The Apache Log4j API","license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt" ,"evidenceCollected": { "vendorEvidence": [ { "type": "vendor", "confidence": "HIGH", "source": "file", "name": "name", "value": "log4j-api" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "apache" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "log4j" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "logging" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "org" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/www.apache.org\/" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "org.apache.logging.log4j.api" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "implementation-url", "value": "https:\/\/logging.apache.org\/log4j\/2.x\/log4j-api\/" } ,{ "type": "vendor", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Vendor", "value": "The Apache Software Foundation" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "Implementation-Vendor-Id", "value": "org.apache.logging.log4j" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "log4jreleasekey", "value": "B3D8E1BA" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "log4jreleasemanager", "value": "Ralph Goers" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "multi-release", "value": "true" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "specification-vendor", "value": "The Apache Software Foundation" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "artifactid", "value": "log4j-api" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "org.apache.logging.log4j" } ,{ "type": "vendor", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Apache Log4j API" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "parent-artifactid", "value": "log4j" } ], "productEvidence": [ { "type": "product", "confidence": "HIGH", "source": "file", "name": "name", "value": "log4j-api" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "apache" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "log4j" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "logging" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "org" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/www.apache.org\/" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "Bundle-Name", "value": "Apache Log4j API" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "org.apache.logging.log4j.api" } ,{ "type": "product", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Title", "value": "Apache Log4j API" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "implementation-url", "value": "https:\/\/logging.apache.org\/log4j\/2.x\/log4j-api\/" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "log4jreleasekey", "value": "B3D8E1BA" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "log4jreleasemanager", "value": "Ralph Goers" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "multi-release", "value": "true" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "specification-title", "value": "Apache Log4j API" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "artifactid", "value": "log4j-api" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "org.apache.logging.log4j" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Apache Log4j API" } ,{ "type": "product", "confidence": "MEDIUM", "source": "pom", "name": "parent-artifactid", "value": "log4j" } ], "versionEvidence": [ { "type": "version", "confidence": "HIGH", "source": "file", "name": "version", "value": "2.14.1" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Bundle-Version", "value": "2.14.1" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Version", "value": "2.14.1" } , { "type": "version", "confidence": "MEDIUM", "source": "Manifest", "name": "log4jreleaseversion", "value": "2.14.1" } , { "type": "version", "confidence": "HIGHEST", "source": "pom", "name": "version", "value": "2.14.1" } ] } ,"packages": [ { "id": "pkg:maven\/org.apache.logging.log4j\/log4j-api@2.14.1" ,"confidence": "HIGH" } ] ,"vulnerabilityIds": [ { "id": "cpe:2.3:a:apache:log4j:2.14.1:*:*:*:*:*:*:*" ,"confidence": "HIGHEST","url": "https:\/\/nvd.nist.gov\/vuln\/search#\/nvd\/home?sortOrder=3&sortDirection=2&cpeFilterMode=applicability&resultType=records&cpeName=cpe%3A2.3%3Aa%3Aapache%3Alog4j%3A2.14.1%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A" } ] },{ "isVirtual": false, "fileName": "log4j-core-2.14.1.jar", "filePath": "~\/projects\/sca-benchmark-wt\/refresh\/results\/public\/raw\/java-maven__dc-jars\/log4j-core-2.14.1.jar" ,"md5": "948dda787593340a7af1a18e328b7b7f", "sha1": "9141212b8507ab50a45525b545b39d224614528b", "sha256": "ade7402a70667a727635d5c4c29495f4ff96f061f12539763f6f123973b465b0","description": "The Apache Log4j Implementation","license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt" ,"evidenceCollected": { "vendorEvidence": [ { "type": "vendor", "confidence": "HIGH", "source": "file", "name": "name", "value": "log4j-core" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "apache" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "core" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "log4j" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "logging" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "org" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "automatic-module-name", "value": "org.apache.logging.log4j.core" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/www.apache.org\/" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "org.apache.logging.log4j.core" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "implementation-url", "value": "https:\/\/logging.apache.org\/log4j\/2.x\/log4j-core\/" } ,{ "type": "vendor", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Vendor", "value": "The Apache Software Foundation" } ,{ "type": "vendor", "confidence": "MEDIUM", "source": "Manifest", "name": "Implementation-Vendor-Id", "value": "org.apache.logging.log4j" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "log4jreleasekey", "value": "B3D8E1BA" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "log4jreleasemanager", "value": "Ralph Goers" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "multi-release", "value": "true" } ,{ "type": "vendor", "confidence": "LOW", "source": "Manifest", "name": "specification-vendor", "value": "The Apache Software Foundation" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "artifactid", "value": "log4j-core" } ,{ "type": "vendor", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "org.apache.logging.log4j" } ,{ "type": "vendor", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Apache Log4j Core" } ,{ "type": "vendor", "confidence": "LOW", "source": "pom", "name": "parent-artifactid", "value": "log4j" } ], "productEvidence": [ { "type": "product", "confidence": "HIGH", "source": "file", "name": "name", "value": "log4j-core" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "apache" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "core" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "log4j" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "logging" } ,{ "type": "product", "confidence": "HIGHEST", "source": "jar", "name": "package name", "value": "org" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "automatic-module-name", "value": "org.apache.logging.log4j.core" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "bundle-docurl", "value": "https:\/\/www.apache.org\/" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "Bundle-Name", "value": "Apache Log4j Core" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "bundle-symbolicname", "value": "org.apache.logging.log4j.core" } ,{ "type": "product", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Title", "value": "Apache Log4j Core" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "implementation-url", "value": "https:\/\/logging.apache.org\/log4j\/2.x\/log4j-core\/" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "log4jreleasekey", "value": "B3D8E1BA" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "log4jreleasemanager", "value": "Ralph Goers" } ,{ "type": "product", "confidence": "LOW", "source": "Manifest", "name": "multi-release", "value": "true" } ,{ "type": "product", "confidence": "MEDIUM", "source": "Manifest", "name": "specification-title", "value": "Apache Log4j Core" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "artifactid", "value": "log4j-core" } ,{ "type": "product", "confidence": "HIGHEST", "source": "pom", "name": "groupid", "value": "org.apache.logging.log4j" } ,{ "type": "product", "confidence": "HIGH", "source": "pom", "name": "name", "value": "Apache Log4j Core" } ,{ "type": "product", "confidence": "MEDIUM", "source": "pom", "name": "parent-artifactid", "value": "log4j" } ], "versionEvidence": [ { "type": "version", "confidence": "HIGH", "source": "file", "name": "version", "value": "2.14.1" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Bundle-Version", "value": "2.14.1" } , { "type": "version", "confidence": "HIGH", "source": "Manifest", "name": "Implementation-Version", "value": "2.14.1" } , { "type": "version", "confidence": "MEDIUM", "source": "Manifest", "name": "log4jreleaseversion", "value": "2.14.1" } , { "type": "version", "confidence": "HIGHEST", "source": "pom", "name": "version", "value": "2.14.1" } ] } ,"packages": [ { "id": "pkg:maven\/org.apache.logging.log4j\/log4j-core@2.14.1" ,"confidence": "HIGH" } ] ,"vulnerabilityIds": [ { "id": "cpe:2.3:a:apache:log4j:2.14.1:*:*:*:*:*:*:*" ,"confidence": "HIGHEST","url": "https:\/\/nvd.nist.gov\/vuln\/search#\/nvd\/home?sortOrder=3&sortDirection=2&cpeFilterMode=applicability&resultType=records&cpeName=cpe%3A2.3%3Aa%3Aapache%3Alog4j%3A2.14.1%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A" } ] ,"vulnerabilities": [ { "source": "NVD", "name": "CVE-2021-44228", "knownExploitedVulnerability": { "VendorProject": "Apache", "Product": "Log4j2", "Name": "Apache Log4j2 Remote Code Execution Vulnerability", "DateAdded": "2021-12-10", "Description": "Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.", "RequiredAction": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\/\/www.cisa.gov\/uscert\/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.", "DueDate": "2021-12-24", "Notes": "https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-44228" }, "severity" : "CRITICAL", "cvssv2": { "score": 9.3 ,"accessVector": "NETWORK" ,"accessComplexity": "MEDIUM" ,"authenticationr": "NONE" ,"confidentialityImpact": "COMPLETE" ,"integrityImpact": "COMPLETE" ,"availabilityImpact": "COMPLETE" ,"severity": "HIGH" ,"version": "2.0","exploitabilityScore": "8.6","impactScore": "10.0" }, "cvssv3": { "baseScore": 10.0 ,"attackVector": "NETWORK" ,"attackComplexity": "LOW" ,"privilegesRequired": "NONE" ,"userInteraction": "NONE" ,"scope": "CHANGED" ,"confidentialityImpact": "HIGH" ,"integrityImpact": "HIGH" ,"availabilityImpact": "HIGH" ,"baseSeverity": "CRITICAL" ,"exploitabilityScore": "3.9","impactScore": "6.0","version": "3.1" }, "cwes": [ "CWE-400", "CWE-502", "CWE-20", "CWE-917" ], "description": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.", "notes": "", "references": [ { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/github.com\/cisagov\/log4j-affected-db","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/165261\/Apache-Log4j2-2.14.1-Information-Disclosure.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" ,"url": "https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44228","name": "THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.kb.cert.org\/vuls\/id\/930724","name": "THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/165282\/Log4j-Payload-Generator.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/165532\/Log4Shell-HTTP-Header-Injection.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/lists.debian.org\/debian-lts-announce\/2021\/12\/msg00007.html","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/twitter.com\/kurtseifried\/status\/1469345530182455296","name": "BROKEN_LINK,EXPLOIT,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/15\/3","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/165673\/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.nu11secur1ty.com\/2021\/12\/cve-2021-44228.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/165307\/Log4j-Remote-Code-Execution-Word-Bypassing.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/165261\/Apache-Log4j2-2.14.1-Information-Disclosure.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/10\/3","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/github.com\/nu11secur1ty\/CVE-mitre\/tree\/main\/CVE-2021-44228","name": "EXPLOIT,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-714170.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/165642\/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.intel.com\/content\/www\/us\/en\/security-center\/advisory\/intel-sa-00646.html","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.debian.org\/security\/2021\/dsa-5020","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/10\/2","name": "MAILING_LIST,MITIGATION,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/10\/1","name": "MAILING_LIST,MITIGATION,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/165532\/Log4Shell-HTTP-Header-Injection.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/14\/4","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.kb.cert.org\/vuls\/id\/930724","name": "THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.intel.com\/content\/www\/us\/en\/security-center\/advisory\/intel-sa-00646.html","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/support.apple.com\/kb\/HT213189","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/165307\/Log4j-Remote-Code-Execution-Word-Bypassing.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/14\/4","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/lists.debian.org\/debian-lts-announce\/2021\/12\/msg00007.html","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/165673\/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.bentley.com\/en\/common-vulnerability-exposure\/be-2022-0001","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/seclists.org\/fulldisclosure\/2022\/Jul\/11","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/165371\/VMware-Security-Advisory-2021-0028.4.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/10\/3","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/github.com\/nu11secur1ty\/CVE-mitre\/tree\/main\/CVE-2021-44228","name": "EXPLOIT,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-479842.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.oracle.com\/security-alerts\/alert-cve-2021-44228.html","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/security.netapp.com\/advisory\/ntap-20211210-0007\/","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/165270\/Apache-Log4j2-2.14.1-Remote-Code-Execution.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/165260\/VMware-Security-Advisory-2021-0028.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/13\/1","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/lists.fedoraproject.org\/archives\/list\/package-announce%40lists.fedoraproject.org\/message\/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB\/","name": "RELEASE_NOTES" }, { "source": "security@apache.org" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-397453.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/psirt.global.sonicwall.com\/vuln-detail\/SNWLID-2021-0032","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/lists.fedoraproject.org\/archives\/list\/package-announce%40lists.fedoraproject.org\/message\/VU57UJDCFIASIO35GC55JMKSRXJMCDFM\/","name": "RELEASE_NOTES" }, { "source": "security@apache.org" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/13\/2","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/seclists.org\/fulldisclosure\/2022\/Dec\/2","name": "EXPLOIT,MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/167917\/MobileIron-Log4Shell-Remote-Command-Execution.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/165225\/Apache-Log4j2-2.14.1-Remote-Code-Execution.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-apache-log4j-qRuKNEbd","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpujan2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-661247.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/167794\/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/171626\/AD-Manager-Plus-7122-Remote-Code-Execution.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpuapr2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.bentley.com\/en\/common-vulnerability-exposure\/be-2022-0001","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/165311\/log4j-scan-Extensive-Scanner.html","name": "BROKEN_LINK,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "https:\/\/psirt.global.sonicwall.com\/vuln-detail\/SNWLID-2021-0032","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/165281\/Log4j2-Log4Shell-Regexes.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "https:\/\/security.netapp.com\/advisory\/ntap-20211210-0007\/","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/165306\/L4sh-Log4j-Remote-Code-Execution.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/13\/1","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/13\/2","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/165311\/log4j-scan-Extensive-Scanner.html","name": "BROKEN_LINK,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "https:\/\/support.apple.com\/kb\/HT213189","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpuapr2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.oracle.com\/security-alerts\/alert-cve-2021-44228.html","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/github.com\/cisagov\/log4j-affected-db\/blob\/develop\/SOFTWARE-LIST.md","name": "BROKEN_LINK,PRODUCT,US_GOVERNMENT_RESOURCE" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/msrc-blog.microsoft.com\/2021\/12\/11\/microsofts-response-to-cve-2021-44228-apache-log4j2\/","name": "PATCH,THIRD_PARTY_ADVISORY,VENDOR_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/seclists.org\/fulldisclosure\/2022\/Mar\/23","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/10\/2","name": "MAILING_LIST,MITIGATION,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/msrc-blog.microsoft.com\/2021\/12\/11\/microsofts-response-to-cve-2021-44228-apache-log4j2\/","name": "PATCH,THIRD_PARTY_ADVISORY,VENDOR_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/165281\/Log4j2-Log4Shell-Regexes.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/seclists.org\/fulldisclosure\/2022\/Mar\/23","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/logging.apache.org\/log4j\/2.x\/security.html","name": "RELEASE_NOTES,VENDOR_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/logging.apache.org\/log4j\/2.x\/security.html","name": "RELEASE_NOTES,VENDOR_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/10\/1","name": "MAILING_LIST,MITIGATION,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-714170.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/github.com\/cisagov\/log4j-affected-db\/blob\/develop\/SOFTWARE-LIST.md","name": "BROKEN_LINK,PRODUCT,US_GOVERNMENT_RESOURCE" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/165642\/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/165260\/VMware-Security-Advisory-2021-0028.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.nu11secur1ty.com\/2021\/12\/cve-2021-44228.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-apache-log4j-qRuKNEbd","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/lists.fedoraproject.org\/archives\/list\/package-announce%40lists.fedoraproject.org\/message\/VU57UJDCFIASIO35GC55JMKSRXJMCDFM\/","name": "RELEASE_NOTES" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/167917\/MobileIron-Log4Shell-Remote-Command-Execution.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/165306\/L4sh-Log4j-Remote-Code-Execution.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.debian.org\/security\/2021\/dsa-5020","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/twitter.com\/kurtseifried\/status\/1469345530182455296","name": "BROKEN_LINK,EXPLOIT,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpujan2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/seclists.org\/fulldisclosure\/2022\/Jul\/11","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-479842.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/165371\/VMware-Security-Advisory-2021-0028.4.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/171626\/AD-Manager-Plus-7122-Remote-Code-Execution.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/165225\/Apache-Log4j2-2.14.1-Remote-Code-Execution.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/167794\/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-397453.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/seclists.org\/fulldisclosure\/2022\/Dec\/2","name": "EXPLOIT,MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-661247.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/15\/3","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/packetstormsecurity.com\/files\/165270\/Apache-Log4j2-2.14.1-Remote-Code-Execution.html","name": "EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "https:\/\/github.com\/cisagov\/log4j-affected-db","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/lists.fedoraproject.org\/archives\/list\/package-announce%40lists.fedoraproject.org\/message\/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB\/","name": "RELEASE_NOTES" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/packetstormsecurity.com\/files\/165282\/Log4j-Payload-Generator.html","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" } ], "vulnerableSoftware": [ { "software": { "id":"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"2.0.1","versionEndExcluding":"2.3.1" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*" ,"vulnerabilityIdMatched":"true","versionStartIncluding":"2.13.0","versionEndExcluding":"2.15.0" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"2.4.0","versionEndExcluding":"2.12.2" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:2.0:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:2.0:beta9:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:2.0:rc1:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:2.0:rc2:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"13.3" } }, { "software": { "id":"cpe:2.3:a:bentley:synchro:*:*:*:*:pro:*:*:*" ,"versionStartIncluding":"6.1","versionEndExcluding":"6.2.4.2" } }, { "software": { "id":"cpe:2.3:a:bentley:synchro_4d:*:*:*:*:pro:*:*:*" ,"versionEndExcluding":"6.4.3.2" } }, { "software": { "id":"cpe:2.3:a:cisco:advanced_malware_protection_virtual_private_cloud_appliance:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"3.5.4" } }, { "software": { "id":"cpe:2.3:a:cisco:automated_subsea_tuning:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.1.0" } }, { "software": { "id":"cpe:2.3:a:cisco:automated_subsea_tuning:02.01.00:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:broadworks:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:broadworks:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2021.11_1.162" } }, { "software": { "id":"cpe:2.3:a:cisco:business_process_automation:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"3.0.000.115" } }, { "software": { "id":"cpe:2.3:a:cisco:business_process_automation:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"3.1.000.000","versionEndExcluding":"3.1.000.044" } }, { "software": { "id":"cpe:2.3:a:cisco:business_process_automation:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"3.2.000.000","versionEndExcluding":"3.2.000.009" } }, { "software": { "id":"cpe:2.3:a:cisco:cloud_connect:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"12.6\\(1\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:cloudcenter:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"4.10.0.16" } }, { "software": { "id":"cpe:2.3:a:cisco:cloudcenter_cost_optimizer:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"5.5.2" } }, { "software": { "id":"cpe:2.3:a:cisco:cloudcenter_suite:4.10.0.15:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:cloudcenter_suite:5.3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:cloudcenter_suite:5.4.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:cloudcenter_suite:5.5.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:cloudcenter_suite:5.5.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:cloudcenter_suite_admin:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"5.3.1" } }, { "software": { "id":"cpe:2.3:a:cisco:cloudcenter_workload_manager:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"5.5.2" } }, { "software": { "id":"cpe:2.3:a:cisco:common_services_platform_collector:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.9.1.3" } }, { "software": { "id":"cpe:2.3:a:cisco:common_services_platform_collector:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"2.10.0","versionEndExcluding":"2.10.0.1" } }, { "software": { "id":"cpe:2.3:a:cisco:common_services_platform_collector:002.009\\(000.000\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:common_services_platform_collector:002.009\\(000.001\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:common_services_platform_collector:002.009\\(000.002\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:common_services_platform_collector:002.009\\(001.000\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:common_services_platform_collector:002.009\\(001.001\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:common_services_platform_collector:002.009\\(001.002\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:common_services_platform_collector:002.010\\(000.000\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:connected_mobile_experiences:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:contact_center_domain_manager:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"12.5\\(1\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:contact_center_management_portal:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"12.5\\(1\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_data_gateway:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.0.2" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_data_gateway:3.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_network_automation:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_network_automation:2.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_network_automation:3.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_network_automation:4.1.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_network_automation:4.1.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_network_controller:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.0.1" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_network_controller:3.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_optimization_engine:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.0.1" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_optimization_engine:3.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_platform_infrastructure:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"4.0.1" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_platform_infrastructure:4.1.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_zero_touch_provisioning:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.0.1" } }, { "software": { "id":"cpe:2.3:a:cisco:crosswork_zero_touch_provisioning:3.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:customer_experience_cloud_agent:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"1.12.1" } }, { "software": { "id":"cpe:2.3:a:cisco:cx_cloud_agent:001.012:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:cyber_vision:4.0.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:cyber_vision_sensor_management_extension:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"4.0.3" } }, { "software": { "id":"cpe:2.3:a:cisco:cyber_vision_sensor_management_extension:4.0.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"11.3\\(1\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:data_center_network_manager:11.3\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.1.2.8" } }, { "software": { "id":"cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"2.2.2.0","versionEndExcluding":"2.2.2.8" } }, { "software": { "id":"cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"2.2.3.0","versionEndExcluding":"2.2.3.4" } }, { "software": { "id":"cpe:2.3:a:cisco:dna_center:2.2.2.8:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:dna_spaces:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:dna_spaces\\:_connector:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.5" } }, { "software": { "id":"cpe:2.3:a:cisco:dna_spaces_connector:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"11.5\\(4\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:emergency_responder:11.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:emergency_responder:11.5\\(4.65000.14\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:emergency_responder:11.5\\(4.66000.14\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:enterprise_chat_and_email:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"12.0\\(1\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:enterprise_chat_and_email:12.0\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:enterprise_chat_and_email:12.5\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:enterprise_chat_and_email:12.6\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*" ,"versionEndIncluding":"4.1.1" } }, { "software": { "id":"cpe:2.3:a:cisco:evolved_programmable_network_manager:3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:evolved_programmable_network_manager:3.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:evolved_programmable_network_manager:4.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:evolved_programmable_network_manager:4.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:evolved_programmable_network_manager:5.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:evolved_programmable_network_manager:5.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:finesse:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"12.6\\(1\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:finesse:12.5\\(1\\):su1:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:finesse:12.5\\(1\\):su2:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:finesse:12.6\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:finesse:12.6\\(1\\):-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:finesse:12.6\\(1\\):es01:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:finesse:12.6\\(1\\):es02:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:finesse:12.6\\(1\\):es03:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:firepower_threat_defense:6.2.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:firepower_threat_defense:6.3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:firepower_threat_defense:6.4.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:firepower_threat_defense:6.5.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:firepower_threat_defense:6.6.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:firepower_threat_defense:6.7.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:firepower_threat_defense:7.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:firepower_threat_defense:7.1.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:fog_director:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.4.0" } }, { "software": { "id":"cpe:2.3:a:cisco:identity_services_engine:002.004\\(000.914\\):-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:identity_services_engine:002.006\\(000.156\\):-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:identity_services_engine:002.007\\(000.356\\):-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:identity_services_engine:003.000\\(000.458\\):-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:identity_services_engine:003.001\\(000.518\\):-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:identity_services_engine:003.002\\(000.116\\):-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:identity_services_engine:2.4.0:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:integrated_management_controller_supervisor:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.3.2.1" } }, { "software": { "id":"cpe:2.3:a:cisco:integrated_management_controller_supervisor:002.003\\(002.000\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:integrated_management_controller_supervisor:2.3.2.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:intersight_virtual_appliance:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"1.0.9-361" } }, { "software": { "id":"cpe:2.3:a:cisco:intersight_virtual_appliance:1.0.9-343:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:iot_operations_dashboard:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:mobility_services_engine:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:network_assurance_engine:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"6.0.2" } }, { "software": { "id":"cpe:2.3:a:cisco:network_assurance_engine:6.0\\(2.1912\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.0\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.1\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.2\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.3\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.4\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.5\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.5\\(2\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.5\\(3\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:network_insights_for_data_center:6.0\\(2.1914\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:network_services_orchestrator:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"5.3.5.1" } }, { "software": { "id":"cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"5.4","versionEndExcluding":"5.4.5.2" } }, { "software": { "id":"cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"5.5","versionEndExcluding":"5.5.4.1" } }, { "software": { "id":"cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"5.6","versionEndExcluding":"5.6.3.1" } }, { "software": { "id":"cpe:2.3:a:cisco:nexus_dashboard:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.1.2" } }, { "software": { "id":"cpe:2.3:a:cisco:nexus_insights:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"6.0.2" } }, { "software": { "id":"cpe:2.3:a:cisco:optical_network_controller:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"1.1.0" } }, { "software": { "id":"cpe:2.3:a:cisco:optical_network_controller:1.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:packaged_contact_center_enterprise:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"11.6" } }, { "software": { "id":"cpe:2.3:a:cisco:packaged_contact_center_enterprise:11.6\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:paging_server:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"14.4.1" } }, { "software": { "id":"cpe:2.3:a:cisco:paging_server:8.3\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:paging_server:8.4\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:paging_server:8.5\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:paging_server:9.0\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:paging_server:9.0\\(2\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:paging_server:9.1\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:paging_server:12.5\\(2\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:paging_server:14.0\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:prime_service_catalog:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"12.1" } }, { "software": { "id":"cpe:2.3:a:cisco:prime_service_catalog:12.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"20.3.4.1" } }, { "software": { "id":"cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"20.4","versionEndExcluding":"20.4.2.1" } }, { "software": { "id":"cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"20.5","versionEndExcluding":"20.5.1.1" } }, { "software": { "id":"cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"20.6","versionEndExcluding":"20.6.2.1" } }, { "software": { "id":"cpe:2.3:a:cisco:sd-wan_vmanage:20.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:sd-wan_vmanage:20.4:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:sd-wan_vmanage:20.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:sd-wan_vmanage:20.6:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:sd-wan_vmanage:20.6.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:sd-wan_vmanage:20.7:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:sd-wan_vmanage:20.8:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:smart_phy:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"3.2.1" } }, { "software": { "id":"cpe:2.3:a:cisco:smart_phy:3.1.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:smart_phy:3.1.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:smart_phy:3.1.4:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:smart_phy:3.1.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:smart_phy:3.2.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:smart_phy:21.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:ucs_central:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.0\\(1p\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:ucs_central_software:2.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:ucs_central_software:2.0\\(1a\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:ucs_central_software:2.0\\(1b\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:ucs_central_software:2.0\\(1c\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:ucs_central_software:2.0\\(1d\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:ucs_central_software:2.0\\(1e\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:ucs_central_software:2.0\\(1f\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:ucs_central_software:2.0\\(1g\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:ucs_central_software:2.0\\(1h\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:ucs_central_software:2.0\\(1k\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:ucs_central_software:2.0\\(1l\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:ucs_director:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"6.8.2.0" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:-:*:*:*" ,"versionEndExcluding":"11.5\\(1\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*" ,"versionEndExcluding":"11.5\\(1\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\):*:*:*:-:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\):*:*:*:session_management:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.17900.52\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.18119.2\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.18900.97\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.21900.40\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.22900.28\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager_im_\\&_presence_service:11.5\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager_im_\\&_presence_service:11.5\\(1.22900.6\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"11.5\\(1\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:11.5\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_computing_system:006.008\\(001.000\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_contact_center_enterprise:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"11.6\\(2\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_contact_center_enterprise:11.6\\(2\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_contact_center_enterprise:12.0\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_contact_center_enterprise:12.5\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_contact_center_enterprise:12.6\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_contact_center_enterprise:12.6\\(2\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_contact_center_express:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"12.5\\(1\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_contact_center_express:12.5\\(1\\):-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_contact_center_express:12.5\\(1\\):su1:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_contact_center_express:12.6\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_contact_center_express:12.6\\(2\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_contact_center_management_portal:12.6\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_customer_voice_portal:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"11.6" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_customer_voice_portal:11.6:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_customer_voice_portal:11.6\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_customer_voice_portal:12.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_customer_voice_portal:12.0\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_customer_voice_portal:12.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_customer_voice_portal:12.5\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_customer_voice_portal:12.6\\(1\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_intelligence_center:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"12.6\\(1\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_intelligence_center:12.6\\(1\\):-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_intelligence_center:12.6\\(1\\):es01:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_intelligence_center:12.6\\(1\\):es02:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_intelligence_center:12.6\\(2\\):-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_sip_proxy:010.000\\(000\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_sip_proxy:010.000\\(001\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_sip_proxy:010.002\\(000\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_sip_proxy:010.002\\(001\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unified_workforce_optimization:11.5\\(1\\):sr7:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"11.5\\(1\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:unity_connection:11.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:unity_connection:11.5\\(1.10000.6\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:video_surveillance_manager:7.14\\(1.26\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:video_surveillance_manager:7.14\\(2.26\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:video_surveillance_manager:7.14\\(3.025\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:video_surveillance_manager:7.14\\(4.018\\):*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:video_surveillance_operations_manager:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"7.14.4" } }, { "software": { "id":"cpe:2.3:a:cisco:virtual_topology_system:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.6.7" } }, { "software": { "id":"cpe:2.3:a:cisco:virtual_topology_system:2.6.6:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:virtualized_infrastructure_manager:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"3.2.0" } }, { "software": { "id":"cpe:2.3:a:cisco:virtualized_infrastructure_manager:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.4" } }, { "software": { "id":"cpe:2.3:a:cisco:virtualized_voice_browser:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"12.5\\(1\\)" } }, { "software": { "id":"cpe:2.3:a:cisco:wan_automation_engine:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"7.3.0.2" } }, { "software": { "id":"cpe:2.3:a:cisco:wan_automation_engine:7.1.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:wan_automation_engine:7.2.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:wan_automation_engine:7.2.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:wan_automation_engine:7.2.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:wan_automation_engine:7.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:wan_automation_engine:7.4:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:wan_automation_engine:7.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:wan_automation_engine:7.6:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"3.0" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:3.0:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release1:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release2:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3:-:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3_security_patch4:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3_security_patch5:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3_service_pack_2:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3_service_pack_3:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release4:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:4.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:4.0:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release1:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release2:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release3:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:workload_optimization_manager:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"3.2.1" } }, { "software": { "id":"cpe:2.3:a:intel:computer_vision_annotation_tool:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:intel:datacenter_manager:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"5.1" } }, { "software": { "id":"cpe:2.3:a:intel:genomics_kernel_library:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:intel:oneapi_sample_browser:-:*:*:*:*:eclipse:*:*" } }, { "software": { "id":"cpe:2.3:a:intel:secure_device_onboard:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:intel:system_studio:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*" } }, { "software": { "id":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*" } }, { "software": { "id":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*" } }, { "software": { "id":"cpe:2.3:a:netapp:brocade_san_navigator:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:netapp:cloud_insights:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:netapp:cloud_manager:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:netapp:cloud_secure_agent:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:netapp:ontap_tools:-:*:*:*:*:vmware_vsphere:*:*" } }, { "software": { "id":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:vmware_vsphere:*:*" } }, { "software": { "id":"cpe:2.3:a:netapp:solidfire_\\&_hci_storage_node:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:netapp:solidfire_enterprise_sds:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:percussion:rhythmyx:*:*:*:*:*:*:*:*" ,"versionEndIncluding":"7.3.2" } }, { "software": { "id":"cpe:2.3:a:siemens:capital:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2019.1" } }, { "software": { "id":"cpe:2.3:a:siemens:capital:2019.1:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:capital:2019.1:sp1912:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"10.4.2" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_advanced_reports:3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_advanced_reports:5.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_advanced_reports:5.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_info_center:5.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_info_center:5.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:e-car_operation_center:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2021-12-13" } }, { "software": { "id":"cpe:2.3:a:siemens:energy_engage:3.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:energyip:8.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:energyip:8.6:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:energyip:8.7:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:energyip:9.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:energyip_prepay:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"3.8.0.12" } }, { "software": { "id":"cpe:2.3:a:siemens:gma-manager:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"8.6.2j-398" } }, { "software": { "id":"cpe:2.3:a:siemens:head-end_system_universal_device_integration_system:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:industrial_edge_management:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:industrial_edge_management_hub:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2021-12-13" } }, { "software": { "id":"cpe:2.3:a:siemens:logo\\!_soft_comfort:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:mendix:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:mindsphere:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2021-12-16" } }, { "software": { "id":"cpe:2.3:a:siemens:navigator:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2021-12-13" } }, { "software": { "id":"cpe:2.3:a:siemens:nx:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:opcenter_intelligence:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"3.2","versionEndExcluding":"3.5" } }, { "software": { "id":"cpe:2.3:a:siemens:operation_scheduler:*:*:*:*:*:*:*:*" ,"versionEndIncluding":"1.1.3" } }, { "software": { "id":"cpe:2.3:a:siemens:sentron_powermanager:4.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:sentron_powermanager:4.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:siguard_dsa:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"4.2","versionEndExcluding":"4.4.1" } }, { "software": { "id":"cpe:2.3:a:siemens:sipass_integrated:2.80:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:sipass_integrated:2.85:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:siveillance_command:*:*:*:*:*:*:*:*" ,"versionEndIncluding":"4.16.2.1" } }, { "software": { "id":"cpe:2.3:a:siemens:siveillance_control_pro:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:siveillance_identity:1.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:siveillance_identity:1.6:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:siveillance_vantage:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:siveillance_viewpoint:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:solid_edge_cam_pro:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:solid_edge_harness_design:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2020" } }, { "software": { "id":"cpe:2.3:a:siemens:solid_edge_harness_design:2020:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:solid_edge_harness_design:2020:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:solid_edge_harness_design:2020:sp2002:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_4:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"4.70" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_4:4.70:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_4:4.70:sp7:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_4:4.70:sp8:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_7:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.30" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_7:2.30:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_7:2.30:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_7:2.30:sp2:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:teamcenter:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:vesys:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2019.1" } }, { "software": { "id":"cpe:2.3:a:siemens:vesys:2019.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:vesys:2019.1:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:vesys:2019.1:sp1912:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:vesys:2020.1:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:vesys:2021.1:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:xpedition_enterprise:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:xpedition_package_integrator:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:snowsoftware:snow_commander:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"8.10.0" } }, { "software": { "id":"cpe:2.3:a:snowsoftware:vm_access_proxy:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"3.6" } }, { "software": { "id":"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"10.0.13" } } ] }, { "source": "NVD", "name": "CVE-2021-45046", "knownExploitedVulnerability": { "VendorProject": "Apache", "Product": "Log4j2", "Name": "Apache Log4j2 Deserialization of Untrusted Data Vulnerability", "DateAdded": "2023-05-01", "Description": "Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.", "RequiredAction": "Apply updates per vendor instructions.", "DueDate": "2023-05-22", "Notes": "https:\/\/logging.apache.org\/log4j\/2.x\/security.html; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-45046" }, "severity" : "CRITICAL", "cvssv2": { "score": 5.1 ,"accessVector": "NETWORK" ,"accessComplexity": "HIGH" ,"authenticationr": "NONE" ,"confidentialityImpact": "PARTIAL" ,"integrityImpact": "PARTIAL" ,"availabilityImpact": "PARTIAL" ,"severity": "MEDIUM" ,"version": "2.0","exploitabilityScore": "4.9","impactScore": "6.4" }, "cvssv3": { "baseScore": 9.0 ,"attackVector": "NETWORK" ,"attackComplexity": "HIGH" ,"privilegesRequired": "NONE" ,"userInteraction": "NONE" ,"scope": "CHANGED" ,"confidentialityImpact": "HIGH" ,"integrityImpact": "HIGH" ,"availabilityImpact": "HIGH" ,"baseSeverity": "CRITICAL" ,"exploitabilityScore": "2.2","impactScore": "6.0","version": "3.1" }, "cwes": [ "CWE-917" ], "description": "It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.", "notes": "", "references": [ { "source": "security@apache.org" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpujul2022.html","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/lists.fedoraproject.org\/archives\/list\/package-announce%40lists.fedoraproject.org\/message\/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ\/","name": "MAILING_LIST,RELEASE_NOTES" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.debian.org\/security\/2021\/dsa-5022","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpuapr2022.html","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/logging.apache.org\/log4j\/2.x\/security.html","name": "MITIGATION,RELEASE_NOTES,VENDOR_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.kb.cert.org\/vuls\/id\/930724","name": "THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE" }, { "source": "security@apache.org" ,"url": "https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-apache-log4j-qRuKNEbd","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/psirt.global.sonicwall.com\/vuln-detail\/SNWLID-2021-0032","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/15\/3","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/18\/1","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/security.gentoo.org\/glsa\/202310-16","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/security.gentoo.org\/glsa\/202310-16","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/lists.fedoraproject.org\/archives\/list\/package-announce%40lists.fedoraproject.org\/message\/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY\/","name": "MAILING_LIST,RELEASE_NOTES" }, { "source": "security@apache.org" ,"url": "https:\/\/www.cve.org\/CVERecord?id=CVE-2021-44228","name": "NOT_APPLICABLE" }, { "source": "security@apache.org" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-479842.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.oracle.com\/security-alerts\/alert-cve-2021-44228.html","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpujan2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.debian.org\/security\/2021\/dsa-5022","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpujul2022.html","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpuapr2022.html","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-479842.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-714170.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.oracle.com\/security-alerts\/alert-cve-2021-44228.html","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.cve.org\/CVERecord?id=CVE-2021-44228","name": "NOT_APPLICABLE" }, { "source": "security@apache.org" ,"url": "https:\/\/www.intel.com\/content\/www\/us\/en\/security-center\/advisory\/intel-sa-00646.html","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/lists.fedoraproject.org\/archives\/list\/package-announce%40lists.fedoraproject.org\/message\/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ\/","name": "MAILING_LIST,RELEASE_NOTES" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/lists.fedoraproject.org\/archives\/list\/package-announce%40lists.fedoraproject.org\/message\/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY\/","name": "MAILING_LIST,RELEASE_NOTES" }, { "source": "security@apache.org" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-397453.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" ,"url": "https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-45046","name": "US_GOVERNMENT_RESOURCE" }, { "source": "security@apache.org" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/18\/1","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-397453.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/psirt.global.sonicwall.com\/vuln-detail\/SNWLID-2021-0032","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-661247.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/14\/4","name": "MAILING_LIST,MITIGATION,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/15\/3","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-apache-log4j-qRuKNEbd","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpujan2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/14\/4","name": "MAILING_LIST,MITIGATION,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-661247.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/logging.apache.org\/log4j\/2.x\/security.html","name": "MITIGATION,RELEASE_NOTES,VENDOR_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-714170.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.kb.cert.org\/vuls\/id\/930724","name": "THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.intel.com\/content\/www\/us\/en\/security-center\/advisory\/intel-sa-00646.html","name": "THIRD_PARTY_ADVISORY" } ], "vulnerableSoftware": [ { "software": { "id":"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"2.0.1","versionEndExcluding":"2.12.2" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*" ,"vulnerabilityIdMatched":"true","versionStartIncluding":"2.13.0","versionEndExcluding":"2.16.0" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:2.0:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:2.0:beta9:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:2.0:rc1:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:2.0:rc2:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cvat:computer_vision_annotation_tool:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:intel:audio_development_kit:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:intel:datacenter_manager:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:intel:genomics_kernel_library:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:intel:oneapi:-:*:*:*:*:eclipse:*:*" } }, { "software": { "id":"cpe:2.3:a:intel:secure_device_onboard:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:intel:sensor_solution_firmware_development_kit:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:intel:system_debugger:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:intel:system_studio:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:captial:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2019.1" } }, { "software": { "id":"cpe:2.3:a:siemens:captial:2019.1:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:captial:2019.1:sp1912:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_advanced_reports:5.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_advanced_reports:5.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_info_center:5.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:desigo_cc_info_center:5.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:e-car_operation_center:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2021-12-13" } }, { "software": { "id":"cpe:2.3:a:siemens:energy_engage:3.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:energyip:8.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:energyip:8.6:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:energyip:8.7:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:energyip:9.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:energyip_prepay:3.7:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:energyip_prepay:3.8:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:gma-manager:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"8.6.2j-398" } }, { "software": { "id":"cpe:2.3:a:siemens:head-end_system_universal_device_integration_system:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:industrial_edge_management:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:industrial_edge_management_hub:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2021-12-13" } }, { "software": { "id":"cpe:2.3:a:siemens:logo\\!_soft_comfort:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:mendix:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:mindsphere:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2021-12-11" } }, { "software": { "id":"cpe:2.3:a:siemens:navigator:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2021-12-13" } }, { "software": { "id":"cpe:2.3:a:siemens:nx:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:opcenter_intelligence:*:*:*:*:*:*:*:*" ,"versionEndIncluding":"3.2" } }, { "software": { "id":"cpe:2.3:a:siemens:operation_scheduler:*:*:*:*:*:*:*:*" ,"versionEndIncluding":"1.1.3" } }, { "software": { "id":"cpe:2.3:a:siemens:sentron_powermanager:4.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:sentron_powermanager:4.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:siguard_dsa:4.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:siguard_dsa:4.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:siguard_dsa:4.4:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:sipass_integrated:2.80:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:sipass_integrated:2.85:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:siveillance_command:*:*:*:*:*:*:*:*" ,"versionEndIncluding":"4.16.2.1" } }, { "software": { "id":"cpe:2.3:a:siemens:siveillance_control_pro:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:siveillance_identity:1.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:siveillance_identity:1.6:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:siveillance_vantage:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:siveillance_viewpoint:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:solid_edge_cam_pro:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:solid_edge_harness_design:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2020" } }, { "software": { "id":"cpe:2.3:a:siemens:solid_edge_harness_design:2020:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:solid_edge_harness_design:2020:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:solid_edge_harness_design:2020:sp2002:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_4:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"4.70" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_4:4.70:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_4:4.70:sp7:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_4:4.70:sp8:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_7:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2.30" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_7:2.30:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_7:2.30:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:spectrum_power_7:2.30:sp2:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:teamcenter:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:tracealertserverplus:*:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:vesys:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"2019.1" } }, { "software": { "id":"cpe:2.3:a:siemens:vesys:2019.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:vesys:2019.1:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:vesys:2019.1:sp1912:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:xpedition_enterprise:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:siemens:xpedition_package_integrator:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"10.0.12" } } ] }, { "source": "NVD", "name": "CVE-2021-44832", "severity" : "MEDIUM", "cvssv2": { "score": 8.5 ,"accessVector": "NETWORK" ,"accessComplexity": "MEDIUM" ,"authenticationr": "SINGLE" ,"confidentialityImpact": "COMPLETE" ,"integrityImpact": "COMPLETE" ,"availabilityImpact": "COMPLETE" ,"severity": "HIGH" ,"version": "2.0","exploitabilityScore": "6.8","impactScore": "10.0" }, "cvssv3": { "baseScore": 6.6 ,"attackVector": "NETWORK" ,"attackComplexity": "HIGH" ,"privilegesRequired": "HIGH" ,"userInteraction": "NONE" ,"scope": "UNCHANGED" ,"confidentialityImpact": "HIGH" ,"integrityImpact": "HIGH" ,"availabilityImpact": "HIGH" ,"baseSeverity": "MEDIUM" ,"exploitabilityScore": "0.7","impactScore": "5.9","version": "3.1" }, "cwes": [ "CWE-20", "CWE-74" ], "description": "Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI data source names to the java protocol in Log4j2 versions 2.17.1, 2.12.4, and 2.3.2.", "notes": "", "references": [ { "source": "security@apache.org" ,"url": "https:\/\/lists.fedoraproject.org\/archives\/list\/package-announce%40lists.fedoraproject.org\/message\/T57MPJUW3MA6QGWZRTMCHHMMPQNVKGFC\/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/lists.apache.org\/thread\/s1o5vlo78ypqxnzn6p8zf6t9shtq5143","name": "MAILING_LIST,VENDOR_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpuapr2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-apache-log4j-qRuKNEbd","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/issues.apache.org\/jira\/browse\/LOG4J2-3293","name": "ISSUE_TRACKING,PATCH,VENDOR_ADVISORY" }, { "source": "security@apache.org" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/28\/1","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpujul2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-784507.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/lists.fedoraproject.org\/archives\/list\/package-announce%40lists.fedoraproject.org\/message\/EVV25FXL4FU5X6X5BSL7RLQ7T6F65MRA\/" }, { "source": "security@apache.org" ,"url": "https:\/\/issues.apache.org\/jira\/browse\/LOG4J2-3293","name": "ISSUE_TRACKING,PATCH,VENDOR_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/lists.fedoraproject.org\/archives\/list\/package-announce%40lists.fedoraproject.org\/message\/EVV25FXL4FU5X6X5BSL7RLQ7T6F65MRA\/" }, { "source": "security@apache.org" ,"url": "https:\/\/lists.apache.org\/thread\/s1o5vlo78ypqxnzn6p8zf6t9shtq5143","name": "MAILING_LIST,VENDOR_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpuapr2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpujan2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-784507.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpujul2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/lists.debian.org\/debian-lts-announce\/2021\/12\/msg00036.html","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/lists.fedoraproject.org\/archives\/list\/package-announce%40lists.fedoraproject.org\/message\/T57MPJUW3MA6QGWZRTMCHHMMPQNVKGFC\/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/28\/1","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/security.netapp.com\/advisory\/ntap-20220104-0001\/","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/security.netapp.com\/advisory\/ntap-20220104-0001\/","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-apache-log4j-qRuKNEbd","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/lists.debian.org\/debian-lts-announce\/2021\/12\/msg00036.html","name": "MAILING_LIST,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpujan2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" } ], "vulnerableSoftware": [ { "software": { "id":"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"2.0.1","versionEndExcluding":"2.3.2" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*" ,"vulnerabilityIdMatched":"true","versionStartIncluding":"2.13.0","versionEndExcluding":"2.17.1" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"2.4","versionEndExcluding":"2.12.4" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:2.0:-:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:2.0:beta7:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:2.0:beta8:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:2.0:beta9:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:2.0:rc1:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:2.0:rc2:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:cisco:cloudcenter:4.10.0.16:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"12.0.0.4.6" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.5.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"8.0.0.0","versionEndIncluding":"8.5.1.0" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"8.3.0.0","versionEndIncluding":"8.5.1.0" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_interactive_session_recorder:6.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_offline_mediation_controller:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"12.0.0.4.4" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.5.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:health_sciences_data_management_workbench:2.5.2.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:health_sciences_data_management_workbench:3.0.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:health_sciences_data_management_workbench:3.1.0.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"12.2.0","versionEndIncluding":"12.2.24" } }, { "software": { "id":"cpe:2.3:a:oracle:policy_automation_for_mobile_devices:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"12.2.0","versionEndIncluding":"12.2.24" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"17.12.0","versionEndIncluding":"17.12.11" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"18.8.0","versionEndIncluding":"18.8.13" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"19.12.0","versionEndIncluding":"19.12.12" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"20.12.0","versionEndIncluding":"20.12.7" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_gateway:21.12.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"19.12.0","versionEndIncluding":"19.12.18.0" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"19.12.0.0","versionEndIncluding":"19.12.18.0" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"20.12.0.0","versionEndIncluding":"20.12.12.0" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:21.12.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:product_lifecycle_analytics:3.6.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_assortment_planning:16.0.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_fiscal_management:14.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_order_broker:18.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_order_broker:19.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_xstore_point_of_service:21.0.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*" ,"versionEndIncluding":"21.12" } }, { "software": { "id":"cpe:2.3:a:oracle:siebel_ui_framework:21.12:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*" } } ] }, { "source": "NVD", "name": "CVE-2021-45105", "severity" : "MEDIUM", "cvssv2": { "score": 4.3 ,"accessVector": "NETWORK" ,"accessComplexity": "MEDIUM" ,"authenticationr": "NONE" ,"confidentialityImpact": "NONE" ,"integrityImpact": "NONE" ,"availabilityImpact": "PARTIAL" ,"severity": "MEDIUM" ,"version": "2.0","exploitabilityScore": "8.6","impactScore": "2.9" }, "cvssv3": { "baseScore": 5.9 ,"attackVector": "NETWORK" ,"attackComplexity": "HIGH" ,"privilegesRequired": "NONE" ,"userInteraction": "NONE" ,"scope": "UNCHANGED" ,"confidentialityImpact": "NONE" ,"integrityImpact": "NONE" ,"availabilityImpact": "HIGH" ,"baseSeverity": "MEDIUM" ,"exploitabilityScore": "2.2","impactScore": "3.6","version": "3.1" }, "cwes": [ "CWE-20", "CWE-674" ], "description": "Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.", "notes": "", "references": [ { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.debian.org\/security\/2021\/dsa-5024","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpujul2022.html","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpuapr2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.zerodayinitiative.com\/advisories\/ZDI-21-1541\/","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "security@apache.org" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/19\/1","name": "MAILING_LIST,MITIGATION,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.kb.cert.org\/vuls\/id\/930724","name": "THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE" }, { "source": "security@apache.org" ,"url": "https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-apache-log4j-qRuKNEbd","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/psirt.global.sonicwall.com\/vuln-detail\/SNWLID-2021-0032","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-501673.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-479842.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/security.netapp.com\/advisory\/ntap-20211218-0001\/","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpuapr2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.debian.org\/security\/2021\/dsa-5024","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.zerodayinitiative.com\/advisories\/ZDI-21-1541\/","name": "THIRD_PARTY_ADVISORY,VDB_ENTRY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpujan2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpujul2022.html","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-479842.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/security.netapp.com\/advisory\/ntap-20211218-0001\/","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/cert-portal.siemens.com\/productcert\/pdf\/ssa-501673.pdf","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/psirt.global.sonicwall.com\/vuln-detail\/SNWLID-2021-0032","name": "THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/logging.apache.org\/log4j\/2.x\/security.html","name": "RELEASE_NOTES,VENDOR_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "http:\/\/www.openwall.com\/lists\/oss-security\/2021\/12\/19\/1","name": "MAILING_LIST,MITIGATION,THIRD_PARTY_ADVISORY" }, { "source": "af854a3a-2127-422b-91ae-364da2661108" ,"url": "https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-apache-log4j-qRuKNEbd","name": "THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/logging.apache.org\/log4j\/2.x\/security.html","name": "RELEASE_NOTES,VENDOR_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.oracle.com\/security-alerts\/cpujan2022.html","name": "PATCH,THIRD_PARTY_ADVISORY" }, { "source": "security@apache.org" ,"url": "https:\/\/www.kb.cert.org\/vuls\/id\/930724","name": "THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE" } ], "vulnerableSoftware": [ { "software": { "id":"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"2.0","versionEndExcluding":"2.3.1" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*" ,"vulnerabilityIdMatched":"true","versionStartIncluding":"2.13.0","versionEndIncluding":"2.16.0" } }, { "software": { "id":"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"2.4","versionEndExcluding":"2.12.3" } }, { "software": { "id":"cpe:2.3:a:netapp:cloud_manager:-:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:agile_plm_mcad_connector:3.6:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:banking_deposits_and_lines_of_credit_servicing:2.12.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:banking_enterprise_default_management:2.7.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:banking_loans_servicing:2.12.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:banking_party_management:2.7.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:banking_payments:14.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:banking_trade_finance:14.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:banking_treasury_management:14.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_asap:7.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.4:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.8.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.7.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.15.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.15.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_convergence:3.0.2.2.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_convergence:3.0.3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_convergent_charging_controller:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"12.0.1.0.0","versionEndIncluding":"12.0.4.0.0" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_convergent_charging_controller:6.0.1.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"8.3.0.0","versionEndIncluding":"8.5.1.0" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_eagle_element_management_system:46.6:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_eagle_ftp_table_base_retrieval:4.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"9.0" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_interactive_session_recorder:6.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"12.0.1.0.0","versionEndIncluding":"12.0.4.0.0" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_network_integrity:7.3.6:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4.0.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.4:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_service_broker:6.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"9.0" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"9.0" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_user_data_repository:12.4:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:e-business_suite:12.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.4.1.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.5.1.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"8.0.7","versionEndIncluding":"8.1.1" } }, { "software": { "id":"cpe:2.3:a:oracle:financial_services_model_management_and_governance:8.0.8.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:financial_services_model_management_and_governance:8.1.0.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:financial_services_model_management_and_governance:8.1.1.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:flexcube_universal_banking:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"12.1.0","versionEndIncluding":"12.4" } }, { "software": { "id":"cpe:2.3:a:oracle:flexcube_universal_banking:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"14.0.0","versionEndIncluding":"14.3.0" } }, { "software": { "id":"cpe:2.3:a:oracle:flexcube_universal_banking:11.83.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:flexcube_universal_banking:14.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:health_sciences_empirica_signal:9.1.0.6:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:health_sciences_empirica_signal:9.2.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:health_sciences_inform:6.2.1.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:health_sciences_inform:6.3.2.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:health_sciences_inform:7.0.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:health_sciences_information_manager:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"3.0.1","versionEndIncluding":"3.0.4" } }, { "software": { "id":"cpe:2.3:a:oracle:healthcare_data_repository:8.1.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:healthcare_foundation:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"7.3.0.1","versionEndIncluding":"7.3.0.4" } }, { "software": { "id":"cpe:2.3:a:oracle:healthcare_master_person_index:5.0.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:healthcare_translational_research:4.1.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:healthcare_translational_research:4.1.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:hospitality_suite8:8.13.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:hospitality_suite8:8.14.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:hospitality_token_proxy_service:19.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:hyperion_bi\\+:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"11.2.8.0" } }, { "software": { "id":"cpe:2.3:a:oracle:hyperion_data_relationship_management:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"11.2.8.0" } }, { "software": { "id":"cpe:2.3:a:oracle:hyperion_infrastructure_technology:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"11.2.8.0" } }, { "software": { "id":"cpe:2.3:a:oracle:hyperion_planning:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"11.2.8.0" } }, { "software": { "id":"cpe:2.3:a:oracle:hyperion_profitability_and_cost_management:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"11.2.8.0" } }, { "software": { "id":"cpe:2.3:a:oracle:hyperion_tax_provision:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"11.2.8.0" } }, { "software": { "id":"cpe:2.3:a:oracle:identity_management_suite:12.2.1.3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:identity_management_suite:12.2.1.4.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:identity_manager_connector:9.1.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:insurance_data_gateway:1.0.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"5.4","versionEndIncluding":"5.6.0.0" } }, { "software": { "id":"cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.2.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:management_cloud_engine:1.5.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*" ,"versionEndIncluding":"8.0.29" } }, { "software": { "id":"cpe:2.3:a:oracle:payment_interface:19.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:payment_interface:20.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"17.12.0","versionEndIncluding":"17.12.11" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"18.8.0","versionEndIncluding":"18.8.13" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"19.12.0","versionEndIncluding":"19.12.12" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"20.12.0","versionEndIncluding":"20.12.7" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_gateway:21.12.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"19.12.0.0","versionEndIncluding":"19.12.18.0" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"20.12.0.0","versionEndIncluding":"20.12.12.0" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:21.12.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_customer_insights:15.0.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_customer_insights:16.0.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_data_extractor_for_merchandising:15.0.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_data_extractor_for_merchandising:16.0.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_eftlink:16.0.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_eftlink:17.0.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_eftlink:18.0.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_eftlink:19.0.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_eftlink:20.0.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_eftlink:21.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_financial_integration:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"16.0.1","versionEndIncluding":"16.0.3" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_financial_integration:14.1.3.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_financial_integration:15.0.3.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_financial_integration:19.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_financial_integration:19.0.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_integration_bus:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"16.0.1","versionEndIncluding":"16.0.3" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_integration_bus:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"19.0.0","versionEndIncluding":"19.0.1.0" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_integration_bus:14.1.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_integration_bus:15.0.3.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_integration_bus:19.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_integration_bus:19.0.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_invoice_matching:15.0.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_invoice_matching:16.0.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_merchandising_system:19.0.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_order_broker:18.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_order_broker:19.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_order_management_system:19.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3.46:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3.115:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.240:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_price_management:13.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_price_management:14.0.4:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_price_management:14.1.3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_price_management:15.0.3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_price_management:16.0.3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_service_backbone:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"16.0.1","versionEndIncluding":"16.0.3" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_service_backbone:14.1.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_service_backbone:15.0.3.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_service_backbone:19.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_service_backbone:19.0.1:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_service_backbone:19.0.1.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4.13:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3.5:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3.14:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3.3:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3.8:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:retail_store_inventory_management:16.0.3.7:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*" ,"versionEndIncluding":"21.12" } }, { "software": { "id":"cpe:2.3:a:oracle:sql_developer:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"21.4.2" } }, { "software": { "id":"cpe:2.3:a:oracle:taleo_platform:*:*:*:*:*:*:*:*" ,"versionEndExcluding":"22.1" } }, { "software": { "id":"cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"4.3.0.1.0","versionEndIncluding":"4.3.0.6.0" } }, { "software": { "id":"cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:utilities_framework:4.4.0.3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*" } }, { "software": { "id":"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*" ,"versionEndIncluding":"10.0.12" } }, { "software": { "id":"cpe:2.3:a:sonicwall:network_security_manager:*:*:*:*:on-premises:*:*:*" ,"versionStartIncluding":"2.0","versionEndExcluding":"3.0" } }, { "software": { "id":"cpe:2.3:a:sonicwall:network_security_manager:*:*:*:*:saas:*:*:*" ,"versionStartIncluding":"2.0","versionEndExcluding":"3.0" } }, { "software": { "id":"cpe:2.3:a:sonicwall:web_application_firewall:*:*:*:*:*:*:*:*" ,"versionStartIncluding":"3.0.0","versionEndExcluding":"3.1.0" } } ] } ] } ] }