Medium
Security advisory
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-1945
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 05:10 UTC · Revision 1
Source evidence
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.
osv:CVE-2020-1945
Complete source record
{
"id": "4be11b8fa75786a267670b3fd557024bef8312c8dba3596dbf3db947a0a908f0",
"url": "https://osv.dev/vulnerability/CVE-2020-1945",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-1945",
"summary": "Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.",
"evidence": "osv:CVE-2020-1945",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2020-1945",
"aliases": [
"CVE-2020-1945",
"GHSA-4p6w-m9wc-c9c9"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/apache/ant",
"type": "GIT",
"events": [
{
"introduced": "5b11971b96a39668b89d0210ac6e8c00032995a1"
},
{
"last_affected": "8ec8ecf4eb94b238b09161055e75508155040180"
},
{
"introduced": "451364131fb89af099496ee27703c1a5c408d1f2"
},
{
"last_affected": "80768efaab4003d90252095d160facfc35adc35e"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:apache:ant:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.1"
},
{
"last_affected": "1.9.14"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:apache:ant:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.10.0"
},
{
"last_affected": "1.10.7"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1945.json"
}
}
],
"modified": "2026-10-24T10:30:25.352887443Z",
"provider": "osv",
"references": [
"https://lists.apache.org/thread.html/r0d08a96ba9de8aa435f32944e8b2867c368a518d4ff57782e3637335%40%3Cissues.hive.apache.org%3E",
"https://lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1013b5cc%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/r1863b9ce4c3e4b1e5b0c671ad05545ba3eb8399616aa746af5dfe1b1%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/r1a9c992d7c8219dc15b4ad448649f0ffdaa88d76ef6a0035c49455f5%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/r1b32c76afffcf676e13ed635a3332f3e46e6aaa7722eb3fc7a28f58e%40%3Cdev.hive.apache.org%3E",
"https://lists.apache.org/thread.html/r1dc8518dc99c42ecca5ff82d0d2de64cd5d3a4fa691eb9ee0304781e%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/r2306b67f20c24942b872b0a41fbdc9330e8467388158bcd19c1094e0%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/r2704fb14ce068c64759a986f81d5b5e42ab434fa13d0f444ad52816b%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/r3cea0f3da4f6d06d7afb6c0804da8e01773a0f50a09b8d9beb2cda65%40%3Cissues.hive.apache.org%3E",
"https://lists.apache.org/thread.html/r4b2904d64affd4266cd72ccb2fc3927c1c2f22009f183095aa46bf90%40%3Cissues.hive.apache.org%3E",
"https://lists.apache.org/thread.html/r4ca33fad3fb39d130cda287d5a60727d9e706e6f2cf2339b95729490%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/r5dfc77048b1f9db26622dce91a6edf083d499397256594952fad5f35%40%3Ccommits.myfaces.apache.org%3E",
"https://lists.apache.org/thread.html/r5e1cdd79f019162f76414708b2092acad0a6703d666d72d717319305%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/r6030d34ceacd0098538425c5dac8251ffc7fd90b886942bc7ef87858%40%3Cnotifications.groovy.apache.org%3E",
"https://lists.apache.org/thread.html/r6970d196cd73863dafdbc3a7052562deedd338e3bd7d73d8171d92d6%40%3Ccommits.groovy.apache.org%3E",
"https://lists.apache.org/thread.html/r6e295d792032ec02b32be3846c21a58857fba4a077d22c5842d69ba2%40%3Ctorque-dev.db.apache.org%3E",
"https://lists.apache.org/thread.html/r6edd3e2cb79ee635630d891b54a4f1a9cd8c7f639d6ee34e75fbe830%40%3Cissues.hive.apache.org%3E",
"https://lists.apache.org/thread.html/r815f88d1044760176f30a4913b4baacd06f3eae4eb662de7388e46d8%40%3Cissues.hive.apache.org%3E",
"https://lists.apache.org/thread.html/r8e24abb7dd77cda14c6df90a377c94f0a413bbfcec90a29540ff8adf%40%3Cissues.hive.apache.org%3E",
"https://lists.apache.org/thread.html/r95dc943e47a211d29df605e14f86c280fc9fa8d828b2b53bd07673c9%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cannounce.apache.org%3E",
"https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cdev.groovy.apache.org%3E",
"https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cusers.groovy.apache.org%3E",
"https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465%40%3Cnotifications.groovy.apache.org%3E",
"https://lists.apache.org/thread.html/raaeddc41da8f3afb1cb224876084a45f68e437a0afd9889a707e4b0c%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/rb860063819b9c0990e1fbce29d83f4554766fe5a05e3b3939736bf2b%40%3Ccommits.myfaces.apache.org%3E",
"https://lists.apache.org/thread.html/rb8ec556f176c83547b959150e2108e2ddf1d61224295941908b0a81f%40%3Cannounce.apache.org%3E",
"https://lists.apache.org/thread.html/rbfe9ba28b74f39f46ec1bbbac3bef313f35017cf3aac13841a84483a%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/rc3c8ef9724b5b1e171529b47f4b35cb7920edfb6e917fa21eb6c64ea%40%3Cdev.ant.apache.org%3E",
"https://lists.apache.org/thread.html/rc89e491b5b270fb40f1210b70554527b737c217ad2e831b643ead6bc%40%3Cuser.ant.apache.org%3E",
"https://lists.apache.org/thread.html/rce099751721c26a8166d8b6578293820832831a0b2cb8d93b8efa081%40%3Cnotifications.groovy.apache.org%3E",
"https://lists.apache.org/thread.html/rd7dda48ff835f4d0293949837d55541bfde3683bd35bd8431e324538%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/rda80ac59119558eaec452e58ddfac2ccc9211da1c65f7927682c78b1%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/rdaa9c51d5dc6560c9d2b3f3d742c768ad0705e154041e574a0fae45c%40%3Cnotifications.groovy.apache.org%3E",
"https://lists.apache.org/thread.html/re1ce84518d773a94a613d988771daf9252c9cf7375a9a477009f9735%40%3Ccommits.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/rf07feaf78afc8f701e21948a06ef92565d3dff1242d710f4fbf900b2%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/rfd346609527a79662c48b1da3ac500ec30f29f7ddaa3575051e81890%40%3Ccommits.creadur.apache.org%3E",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EQBR65TINSJRN7PTPIVNYS33P535WM74/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RRVAWTCVXJMRYKQKEXYSNBF7NLSR6OEI/",
"https://lists.apache.org/thread.html/r8e592bbfc016a5dbe2a8c0e81ff99682b9c78c453621b82c14e7b75e%40%3Cdev.ant.apache.org%3E",
"https://security.gentoo.org/glsa/202007-34",
"https://usn.ubuntu.com/4380-1/",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpujan2021.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.oracle.com/security-alerts/cpujul2020.html",
"https://www.oracle.com/security-alerts/cpuoct2020.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:oracle:banking_enterprise_collections:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:banking_enterprise_collections",
"extracted_events": [
{
"range": [
{
"introduced": "2.7.0"
},
{
"last_affected": "2.9.0"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:banking_liquidity_management:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:banking_liquidity_management",
"extracted_events": [
{
"range": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.4.0"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:banking_platform",
"extracted_events": [
{
"range": [
{
"introduced": "2.4.0"
},
{
"last_affected": "2.9.0"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_diameter_signaling_router",
"extracted_events": [
{
"range": [
{
"introduced": "8.0.0"
},
{
"last_affected": "8.2.2"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:financial_services_analytical_applications_infrastructure",
"extracted_events": [
{
"range": [
{
"introduced": "8.0.6"
},
{
"last_affected": "8.1.0"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:health_sciences_information_manager:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:health_sciences_information_manager",
"extracted_events": [
{
"range": [
{
"introduced": "3.0"
},
{
"last_affected": "3.0.2"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:primavera_gateway",
"extracted_events": [
{
"range": [
{
"introduced": "16.2.0"
},
{
"last_affected": "16.2.11"
},
{
"introduced": "17.12.0"
},
{
"last_affected": "17.12.7"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:primavera_unifier",
"extracted_events": [
{
"range": [
{
"introduced": "17.7"
},
{
"last_affected": "17.12"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:timesten_in-memory_database",
"extracted_events": [
{
"range": [
{
"fixed": "11.2.2.8.27"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:utilities_framework",
"extracted_events": [
{
"range": [
{
"introduced": "4.3.0.1.0"
},
{
"last_affected": "4.3.0.6.0"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "19.10"
},
{
"last_affected": "19.10"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"range": [
{
"introduced": "31"
},
{
"last_affected": "31"
},
{
"introduced": "32"
},
{
"last_affected": "32"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*"
],
"vendor_product": "opensuse:leap",
"extracted_events": [
{
"range": [
{
"introduced": "15.2"
},
{
"last_affected": "15.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:agile_engineering_data_management",
"extracted_events": [
{
"range": [
{
"introduced": "6.2.1.0"
},
{
"last_affected": "6.2.1.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:business_process_management_suite",
"extracted_events": [
{
"range": [
{
"introduced": "12.2.1.3.0"
},
{
"last_affected": "12.2.1.3.0"
},
{
"introduced": "12.2.1.4.0"
},
{
"last_affected": "12.2.1.4.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:category_management_planning_\\&_optimization:15.0.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:category_management_planning_&_optimization",
"extracted_events": [
{
"range": [
{
"introduced": "15.0.3"
},
{
"last_affected": "15.0.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_asap:7.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_asap",
"extracted_events": [
{
"range": [
{
"introduced": "7.3"
},
{
"last_affected": "7.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_metasolv_solution:6.3.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_metasolv_solution",
"extracted_events": [
{
"range": [
{
"introduced": "6.3.0"
},
{
"last_affected": "6.3.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_order_and_service_management:7.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:communications_order_and_service_management:7.4:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_order_and_service_management",
"extracted_events": [
{
"range": [
{
"introduced": "7.3"
},
{
"last_affected": "7.3"
},
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:data_integrator",
"extracted_events": [
{
"range": [
{
"introduced": "12.2.1.3.0"
},
{
"last_affected": "12.2.1.3.0"
},
{
"introduced": "12.2.1.4.0"
},
{
"last_affected": "12.2.1.4.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:endeca_information_discovery_studio:3.2.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:endeca_information_discovery_studio",
"extracted_events": [
{
"range": [
{
"introduced": "3.2.0"
},
{
"last_affected": "3.2.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:enterprise_manager_ops_center",
"extracted_events": [
{
"range": [
{
"introduced": "12.4.0.0"
},
{
"last_affected": "12.4.0.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:enterprise_repository:11.1.1.7.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:enterprise_repository",
"extracted_events": [
{
"range": [
{
"introduced": "11.1.1.7.0"
},
{
"last_affected": "11.1.1.7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:flexcube_investor_servicing:12.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:flexcube_investor_servicing:14.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:flexcube_investor_servicing:14.1.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:flexcube_investor_servicing",
"extracted_events": [
{
"range": [
{
"introduced": "12.1.0"
},
{
"last_affected": "12.1.0"
},
{
"introduced": "12.3.0"
},
{
"last_affected": "12.3.0"
},
{
"introduced": "12.4.0"
},
{
"last_affected": "12.4.0"
},
{
"introduced": "14.0.0"
},
{
"last_affected": "14.0.0"
},
{
"introduced": "14.1.0"
},
{
"last_affected": "14.1.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:flexcube_private_banking",
"extracted_events": [
{
"range": [
{
"introduced": "12.0.0"
},
{
"last_affected": "12.0.0"
},
{
"introduced": "12.1.0"
},
{
"last_affected": "12.1.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:primavera_unifier",
"extracted_events": [
{
"range": [
{
"introduced": "16.1"
},
{
"last_affected": "16.1"
},
{
"introduced": "16.2"
},
{
"last_affected": "16.2"
},
{
"introduced": "18.8"
},
{
"last_affected": "18.8"
},
{
"introduced": "19.12"
},
{
"last_affected": "19.12"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:rapid_planning:12.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:rapid_planning:12.2:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:rapid_planning",
"extracted_events": [
{
"range": [
{
"introduced": "12.1"
},
{
"last_affected": "12.1"
},
{
"introduced": "12.2"
},
{
"last_affected": "12.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:real-time_decision_server:3.2.1.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:real-time_decision_server",
"extracted_events": [
{
"range": [
{
"introduced": "3.2.1.0"
},
{
"last_affected": "3.2.1.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_advanced_inventory_planning:14.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_advanced_inventory_planning:15.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_advanced_inventory_planning:16.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_advanced_inventory_planning",
"extracted_events": [
{
"range": [
{
"introduced": "14.1"
},
{
"last_affected": "14.1"
},
{
"introduced": "15.0"
},
{
"last_affected": "15.0"
},
{
"introduced": "16.0"
},
{
"last_affected": "16.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_assortment_planning:15.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_assortment_planning:16.0.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_assortment_planning",
"extracted_events": [
{
"range": [
{
"introduced": "15.0.3"
},
{
"last_affected": "15.0.3"
},
{
"introduced": "16.0.3"
},
{
"last_affected": "16.0.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_back_office",
"extracted_events": [
{
"range": [
{
"introduced": "14.0"
},
{
"last_affected": "14.0"
},
{
"introduced": "14.1"
},
{
"last_affected": "14.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_bulk_data_integration:15.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_bulk_data_integration:16.0.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_bulk_data_integration:16.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_bulk_data_integration:19.0.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_bulk_data_integration",
"extracted_events": [
{
"range": [
{
"introduced": "15.0"
},
{
"last_affected": "15.0"
},
{
"introduced": "16.0"
},
{
"last_affected": "16.0"
},
{
"introduced": "16.0.3.0"
},
{
"last_affected": "16.0.3.0"
},
{
"introduced": "19.0.1"
},
{
"last_affected": "19.0.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_central_office:14.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_central_office",
"extracted_events": [
{
"range": [
{
"introduced": "14.0"
},
{
"last_affected": "14.0"
},
{
"introduced": "14.1"
},
{
"last_affected": "14.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_data_extractor_for_merchandising:1.10:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_data_extractor_for_merchandising:1.9:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_data_extractor_for_merchandising",
"extracted_events": [
{
"range": [
{
"introduced": "1.9"
},
{
"last_affected": "1.9"
},
{
"introduced": "1.10"
},
{
"last_affected": "1.10"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_extract_transform_and_load:13.2.5:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_extract_transform_and_load:13.2.8:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_extract_transform_and_load",
"extracted_events": [
{
"range": [
{
"introduced": "13.2.5"
},
{
"last_affected": "13.2.5"
},
{
"introduced": "13.2.8"
},
{
"last_affected": "13.2.8"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_financial_integration:14.1.3.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_financial_integration:15.0.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_financial_integration:15.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_financial_integration:16.0.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_financial_integration:16.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_financial_integration",
"extracted_events": [
{
"range": [
{
"introduced": "14.1.3.2"
},
{
"last_affected": "14.1.3.2"
},
{
"introduced": "15.0"
},
{
"last_affected": "15.0"
},
{
"introduced": "15.0.4.0"
},
{
"last_affected": "15.0.4.0"
},
{
"introduced": "16.0"
},
{
"last_affected": "16.0"
},
{
"introduced": "16.0.3.0"
},
{
"last_affected": "16.0.3.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_integration_bus:14.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_integration_bus:15.0.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_integration_bus:15.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_integration_bus:16.0.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_integration_bus:16.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_integration_bus:19.0.1.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_integration_bus",
"extracted_events": [
{
"range": [
{
"introduced": "14.1"
},
{
"last_affected": "14.1"
},
{
"introduced": "14.1.3.2"
},
{
"last_affected": "14.1.3.2"
},
{
"introduced": "15.0"
},
{
"last_affected": "15.0"
},
{
"introduced": "15.0.4.0"
},
{
"last_affected": "15.0.4.0"
},
{
"introduced": "16.0"
},
{
"last_affected": "16.0"
},
{
"introduced": "16.0.3.0"
},
{
"last_affected": "16.0.3.0"
},
{
"introduced": "19.0.1.0"
},
{
"last_affected": "19.0.1.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_item_planning:15.0.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_item_planning",
"extracted_events": [
{
"range": [
{
"introduced": "15.0.3"
},
{
"last_affected": "15.0.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_macro_space_optimization:15.0.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_macro_space_optimization",
"extracted_events": [
{
"range": [
{
"introduced": "15.0.3"
},
{
"last_affected": "15.0.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_merchandise_financial_planning:15.0.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_merchandise_financial_planning",
"extracted_events": [
{
"range": [
{
"introduced": "15.0.3"
},
{
"last_affected": "15.0.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_merchandising_system:19.0.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_merchandising_system",
"extracted_events": [
{
"range": [
{
"introduced": "19.0.1"
},
{
"last_affected": "19.0.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_point-of-service:14.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_point-of-service:15.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_point-of-service:16.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_point-of-service",
"extracted_events": [
{
"range": [
{
"introduced": "14.0"
},
{
"last_affected": "14.0"
},
{
"introduced": "14.1"
},
{
"last_affected": "14.1"
},
{
"introduced": "15.0"
},
{
"last_affected": "15.0"
},
{
"introduced": "16.0"
},
{
"last_affected": "16.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_predictive_application_server:14.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_predictive_application_server",
"extracted_events": [
{
"range": [
{
"introduced": "14.0.3"
},
{
"last_affected": "14.0.3"
},
{
"introduced": "14.1.3"
},
{
"last_affected": "14.1.3"
},
{
"introduced": "15.0.3"
},
{
"last_affected": "15.0.3"
},
{
"introduced": "16.0.3"
},
{
"last_affected": "16.0.3"
},
{
"introduced": "16.0.3.0"
},
{
"last_affected": "16.0.3.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_regular_price_optimization:15.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_regular_price_optimization:16.0.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_regular_price_optimization",
"extracted_events": [
{
"range": [
{
"introduced": "15.0.3"
},
{
"last_affected": "15.0.3"
},
{
"introduced": "16.0.3"
},
{
"last_affected": "16.0.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_replenishment_optimization:15.0.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_replenishment_optimization",
"extracted_events": [
{
"range": [
{
"introduced": "15.0.3"
},
{
"last_affected": "15.0.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_returns_management",
"extracted_events": [
{
"range": [
{
"introduced": "14.0"
},
{
"last_affected": "14.0"
},
{
"introduced": "14.1"
},
{
"last_affected": "14.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_service_backbone:15.0.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_service_backbone:15.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_service_backbone:16.0.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_service_backbone:16.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_service_backbone:19.0.1.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_service_backbone",
"extracted_events": [
{
"range": [
{
"introduced": "14.1.3.2"
},
{
"last_affected": "14.1.3.2"
},
{
"introduced": "15.0"
},
{
"last_affected": "15.0"
},
{
"introduced": "15.0.4.0"
},
{
"last_affected": "15.0.4.0"
},
{
"introduced": "16.0"
},
{
"last_affected": "16.0"
},
{
"introduced": "16.0.3.0"
},
{
"last_affected": "16.0.3.0"
},
{
"introduced": "19.0.1.0"
},
{
"last_affected": "19.0.1.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_size_profile_optimization:15.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_size_profile_optimization:16.0.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_size_profile_optimization",
"extracted_events": [
{
"range": [
{
"introduced": "15.0.3"
},
{
"last_affected": "15.0.3"
},
{
"introduced": "16.0.3"
},
{
"last_affected": "16.0.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_store_inventory_management:14.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_store_inventory_management:15.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_store_inventory_management:16.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_store_inventory_management:16.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_store_inventory_management",
"extracted_events": [
{
"range": [
{
"introduced": "14.0.4"
},
{
"last_affected": "14.0.4"
},
{
"introduced": "14.1"
},
{
"last_affected": "14.1"
},
{
"introduced": "14.1.3"
},
{
"last_affected": "14.1.3"
},
{
"introduced": "15.0"
},
{
"last_affected": "15.0"
},
{
"introduced": "15.0.3"
},
{
"last_affected": "15.0.3"
},
{
"introduced": "16.0"
},
{
"last_affected": "16.0"
},
{
"introduced": "16.0.3"
},
{
"last_affected": "16.0.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_xstore_point_of_service",
"extracted_events": [
{
"range": [
{
"introduced": "15.0.4"
},
{
"last_affected": "15.0.4"
},
{
"introduced": "16.0.6"
},
{
"last_affected": "16.0.6"
},
{
"introduced": "17.0.4"
},
{
"last_affected": "17.0.4"
},
{
"introduced": "18.0.3"
},
{
"last_affected": "18.0.3"
},
{
"introduced": "19.0.2"
},
{
"last_affected": "19.0.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:timesten_in-memory_database:11.2.2.8.49:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:timesten_in-memory_database",
"extracted_events": [
{
"range": [
{
"introduced": "11.2.2.8.49"
},
{
"last_affected": "11.2.2.8.49"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:utilities_framework:2.2.0.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:utilities_framework:4.2.0.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:utilities_framework:4.2.0.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:utilities_framework",
"extracted_events": [
{
"range": [
{
"introduced": "2.2.0.0.0"
},
{
"last_affected": "2.2.0.0.0"
},
{
"introduced": "4.2.0.2.0"
},
{
"last_affected": "4.2.0.2.0"
},
{
"introduced": "4.2.0.3.0"
},
{
"last_affected": "4.2.0.3.0"
},
{
"introduced": "4.4.0.0.0"
},
{
"last_affected": "4.4.0.0.0"
},
{
"introduced": "4.4.0.2.0"
},
{
"last_affected": "4.4.0.2.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2020-1945",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 431346,
"published_at": "2020-05-14T16:15:12.767+00:00"
}