Medium
Security advisory
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the "-crl_download" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-1971
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:17 UTC · Revision 1
Source evidence
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the "-crl_download" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of
osv:CVE-2020-1971
Complete source record
{
"id": "50a60a7644b6ed5a850ee3a456c6487ed66322c5894b9074dca5d96840fe60d7",
"url": "https://osv.dev/vulnerability/CVE-2020-1971",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-1971",
"summary": "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of",
"evidence": "osv:CVE-2020-1971",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2020-1971",
"aliases": [
"A-175147055",
"BIT-node-2020-1971",
"BIT-node-min-2020-1971",
"CVE-2020-1971",
"PUB-A-175147055"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/graalvm/graalvm-ce-builds",
"type": "GIT",
"events": [
{
"introduced": "4b00c1f1d35186b8ac562522370ad3982124bd80"
},
{
"last_affected": "fab0396eab86e8236899c69d3a56baad00e5af14"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:oracle:graalvm:19.3.4:*:*:*:enterprise:*:*:*",
"range": [
{
"introduced": "19.3.4"
},
{
"last_affected": "19.3.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:graalvm:20.3.0:*:*:*:enterprise:*:*:*",
"range": [
{
"introduced": "20.3.0"
},
{
"last_affected": "20.3.0"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"19.3.4",
"20.3.0",
"vm-20.3.0",
"vm-19.3.4"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1971.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/mysql/mysql-server",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "ee4455a33b10f1b1886044322e4893f587b319ed"
},
{
"last_affected": "2032b65c44e242a7e452a38bf7626dfacc315b9c"
},
{
"introduced": "ca94b993454c86be248fbe180db94647488114e9"
},
{
"last_affected": "ee4455a33b10f1b1886044322e4893f587b319ed"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "8.0.22"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "5.7.32"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "8.0.15"
},
{
"last_affected": "8.0.22"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"mysql-cluster-8.0.22",
"mysql-8.0.22",
"mysql-5.7.32",
"mysql-5.7.31",
"mysql-5.1.4",
"mysql-4.0.4",
"mysql-4.0.2",
"mysql-3.23.36",
"mysql-3.23.33",
"mysql-3.23.32",
"mysql-3.23.31",
"mysql-3.23.30-gamma",
"mysql-3.23.28-gamma",
"mysql-3.23.22-beta"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1971.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/nodejs/node",
"type": "GIT",
"events": [
{
"introduced": "cf41627411886000429bde058a6594fb7f6d6d47"
},
{
"last_affected": "4a276cc2a960b3f9a138ac3a99c9249a63b4d472"
},
{
"introduced": "ab4af087e83d91a46354d765306d3543b1d85423"
},
{
"fixed": "811be91dfe623c7569f5fd87b1eaf46074334c94"
},
{
"introduced": "2f45ad8060e13d5ac912335096d21526f2f9602b"
},
{
"last_affected": "921493e2287aa895679620155b5288b2e1587bfd"
},
{
"introduced": "42cce5a9d0fd905bf4ad7a2528c36572dfb8b5ad"
},
{
"fixed": "87ddc7f10c6463bbcdd9dfc79f1e510a584e616e"
},
{
"introduced": "73aa21658dfa6a22c06451d080152b32b1f98dbe"
},
{
"last_affected": "354b6a93bd1d66f1833489d6fe01a2b0e8f6aff9"
},
{
"introduced": "c1da528bc25c9cc5a8240a7b4f136f5968f6e113"
},
{
"fixed": "04509d6847a2d164b223a77aed0c41fe9ca60e57"
},
{
"introduced": "d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"
},
{
"fixed": "f978628b806b6650a90cd47e8b28590224af75e8"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
"range": [
{
"introduced": "10.0.0"
},
{
"last_affected": "10.12.0"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
"range": [
{
"introduced": "10.13.0"
},
{
"fixed": "10.23.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
"range": [
{
"introduced": "12.0.0"
},
{
"last_affected": "12.12.0"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
"range": [
{
"introduced": "12.13.0"
},
{
"fixed": "12.20.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
"range": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.14.0"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
"range": [
{
"introduced": "14.15.0"
},
{
"fixed": "14.15.4"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
"range": [
{
"introduced": "15.0.0"
},
{
"fixed": "15.5.0"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v14.15.3",
"v14.15.2",
"v15.4.0",
"v12.20.0",
"v15.3.0",
"v12.19.1",
"v14.15.1",
"v15.2.1",
"v15.2.0",
"v15.1.0",
"v14.15.0",
"v10.23.0",
"v15.0.1",
"v15.0.0",
"v14.14.0",
"v14.13.1",
"v12.19.0",
"v14.13.0",
"v14.12.0",
"v12.18.4",
"v10.22.1",
"v14.11.0",
"v14.10.1",
"v14.10.0",
"v14.9.0",
"v14.8.0",
"v14.7.0",
"v12.18.3",
"v14.6.0",
"v10.22.0",
"v14.5.0",
"v12.18.2",
"v12.18.1",
"v12.18.0",
"v14.4.0",
"v10.21.0",
"v12.17.0",
"v14.3.0",
"v14.2.0",
"v14.1.0",
"v12.16.3",
"v14.0.0",
"v10.20.1",
"v12.16.2",
"v10.20.0",
"v12.16.1",
"v12.16.0",
"v10.19.0",
"v12.15.0",
"v10.18.1",
"v12.14.1",
"v12.14.0",
"v10.18.0",
"v12.13.1",
"v10.17.0",
"v12.13.0",
"v12.12.0",
"v12.11.1",
"v12.11.0",
"v12.10.0",
"v12.9.1",
"v12.9.0",
"v10.16.3",
"v12.8.1",
"v12.8.0",
"v10.16.2",
"v10.16.1",
"v12.7.0",
"v12.6.0",
"v12.5.0",
"v12.4.0",
"v10.16.0",
"v12.3.1",
"v12.3.0",
"v12.2.0",
"v12.1.0",
"v12.0.0",
"v10.15.3",
"v10.15.2",
"v10.15.1",
"v10.15.0",
"v10.14.2",
"v10.14.1",
"v10.14.0",
"v10.13.0",
"v10.12.0",
"v10.11.0",
"v10.10.0",
"v10.9.0",
"v10.8.0",
"v10.7.0",
"v10.6.0",
"v10.5.0",
"v10.4.1",
"v10.4.0",
"v10.3.0",
"v10.2.1",
"v10.2.0",
"v10.1.0",
"v10.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1971.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/openssl/openssl",
"type": "GIT",
"events": [
{
"introduced": "e818b74be2170fbe957a07b0da4401c2b694b3b8"
},
{
"fixed": "e818b74be2170fbe957a07b0da4401c2b694b3b8"
},
{
"introduced": "e04bd3433fd84e1861bf258ea37928d9845e6a86"
},
{
"fixed": "e04bd3433fd84e1861bf258ea37928d9845e6a86"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.0.2"
},
{
"fixed": "1.0.2x"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.1.1"
},
{
"fixed": "1.1.1i"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1971.json",
"vanir_signatures": [
{
"id": "CVE-2020-1971-c377fa22",
"digest": {
"threshold": 0.9,
"line_hashes": [
"28170854778703993674264004058177114599",
"73132526844288570625317440636111911761",
"177405411499435185068645597737938634778",
"224809958623850711330610094965797758930",
"295554444428855106393106961197201359586"
]
},
"source": "https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86",
"target": {
"file": "include/openssl/opensslv.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-1971-e051451f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"251633914150035957322733061977107206211",
"338514574181828579838011565939158652696",
"76638288692106140328510055542557597351",
"142922657400765574308962710386922248045",
"71649992455794854055653842592139575350",
"65527166711110472566013424527579064967",
"253196866009476977787139000804413898733",
"172177136897997206866313011107384691461"
]
},
"source": "https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8",
"target": {
"file": "crypto/opensslv.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:11:59Z"
}
}
],
"modified": "2026-10-24T14:11:59.854245215Z",
"provider": "osv",
"references": [
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e",
"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920",
"https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E",
"https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/",
"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676",
"https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html",
"https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html",
"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc",
"https://security.gentoo.org/glsa/202012-13",
"https://security.netapp.com/advisory/ntap-20201218-0005/",
"https://security.netapp.com/advisory/ntap-20210513-0002/",
"https://security.netapp.com/advisory/ntap-20240621-0006/",
"https://www.debian.org/security/2020/dsa-4807",
"https://www.openssl.org/news/secadv/20201208.txt",
"https://www.oracle.com/security-alerts/cpujan2021.html",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://www.tenable.com/security/tns-2020-11",
"https://www.tenable.com/security/tns-2021-09",
"https://www.tenable.com/security/tns-2021-10",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuApr2021.html",
"https://www.oracle.com/security-alerts/cpuapr2022.html"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*"
],
"vendor_product": "netapp:e-series_santricity_os_controller",
"extracted_events": [
{
"range": [
{
"introduced": "11.0.0"
},
{
"last_affected": "11.60.3"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_diameter_intelligence_hub",
"extracted_events": [
{
"range": [
{
"introduced": "8.0.0"
},
{
"last_affected": "8.1.0"
},
{
"introduced": "8.2.0"
},
{
"last_affected": "8.2.3"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:jd_edwards_enterpriseone_tools",
"extracted_events": [
{
"range": [
{
"fixed": "9.2.5.3"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*"
],
"vendor_product": "siemens:sinec_infrastructure_network_services",
"extracted_events": [
{
"range": [
{
"fixed": "1.0.1.1"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:*"
],
"vendor_product": "tenable:log_correlation_engine",
"extracted_events": [
{
"range": [
{
"fixed": "6.0.9"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:tenable:nessus_network_monitor:*:*:*:*:*:*:*:*"
],
"vendor_product": "tenable:nessus_network_monitor",
"extracted_events": [
{
"range": [
{
"fixed": "5.13.1"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
},
{
"introduced": "10.0"
},
{
"last_affected": "10.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"range": [
{
"introduced": "32"
},
{
"last_affected": "32"
},
{
"introduced": "33"
},
{
"last_affected": "33"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:api_gateway",
"extracted_events": [
{
"range": [
{
"introduced": "11.1.2.4.0"
},
{
"last_affected": "11.1.2.4.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*",
"cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*",
"cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*",
"cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*"
],
"vendor_product": "oracle:business_intelligence",
"extracted_events": [
{
"range": [
{
"introduced": "5.5.0.0.0"
},
{
"last_affected": "5.5.0.0.0"
},
{
"introduced": "5.9.0.0.0"
},
{
"last_affected": "5.9.0.0.0"
},
{
"introduced": "12.2.1.3.0"
},
{
"last_affected": "12.2.1.3.0"
},
{
"introduced": "12.2.1.4.0"
},
{
"last_affected": "12.2.1.4.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_cloud_native_core_network_function_cloud_native_environment",
"extracted_events": [
{
"range": [
{
"introduced": "1.10.0"
},
{
"last_affected": "1.10.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_session_border_controller:cz8.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:communications_session_border_controller:cz8.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:communications_session_border_controller:cz8.4:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_session_border_controller",
"extracted_events": [
{
"range": [
{
"introduced": "cz8.2"
},
{
"last_affected": "cz8.2"
},
{
"introduced": "cz8.3"
},
{
"last_affected": "cz8.3"
},
{
"introduced": "cz8.4"
},
{
"last_affected": "cz8.4"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_session_router:cz8.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:communications_session_router:cz8.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:communications_session_router:cz8.4:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_session_router",
"extracted_events": [
{
"range": [
{
"introduced": "cz8.2"
},
{
"last_affected": "cz8.2"
},
{
"introduced": "cz8.3"
},
{
"last_affected": "cz8.3"
},
{
"introduced": "cz8.4"
},
{
"last_affected": "cz8.4"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:cz8.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:cz8.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:cz8.4:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_subscriber-aware_load_balancer",
"extracted_events": [
{
"range": [
{
"introduced": "cz8.2"
},
{
"last_affected": "cz8.2"
},
{
"introduced": "cz8.3"
},
{
"last_affected": "cz8.3"
},
{
"introduced": "cz8.4"
},
{
"last_affected": "cz8.4"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_unified_session_manager:scz8.2.5:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_unified_session_manager",
"extracted_events": [
{
"range": [
{
"introduced": "scz8.2.5"
},
{
"last_affected": "scz8.2.5"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:enterprise_communications_broker:pcz3.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:enterprise_communications_broker:pcz3.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:enterprise_communications_broker:pcz3.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:enterprise_communications_broker",
"extracted_events": [
{
"range": [
{
"introduced": "pcz3.1"
},
{
"last_affected": "pcz3.1"
},
{
"introduced": "pcz3.2"
},
{
"last_affected": "pcz3.2"
},
{
"introduced": "pcz3.3"
},
{
"last_affected": "pcz3.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:enterprise_manager_base_platform",
"extracted_events": [
{
"range": [
{
"introduced": "13.3.0.0"
},
{
"last_affected": "13.3.0.0"
},
{
"introduced": "13.4.0.0"
},
{
"last_affected": "13.4.0.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:enterprise_manager_for_storage_management",
"extracted_events": [
{
"range": [
{
"introduced": "13.4.0.0"
},
{
"last_affected": "13.4.0.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:enterprise_manager_ops_center",
"extracted_events": [
{
"range": [
{
"introduced": "12.4.0.0"
},
{
"last_affected": "12.4.0.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:enterprise_session_border_controller:cz8.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:enterprise_session_border_controller:cz8.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:enterprise_session_border_controller:cz8.4:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:enterprise_session_border_controller",
"extracted_events": [
{
"range": [
{
"introduced": "cz8.2"
},
{
"last_affected": "cz8.2"
},
{
"introduced": "cz8.3"
},
{
"last_affected": "cz8.3"
},
{
"introduced": "cz8.4"
},
{
"last_affected": "cz8.4"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:essbase",
"extracted_events": [
{
"range": [
{
"introduced": "21.2"
},
{
"last_affected": "21.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:http_server",
"extracted_events": [
{
"range": [
{
"introduced": "12.2.1.4.0"
},
{
"last_affected": "12.2.1.4.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:jd_edwards_world_security",
"extracted_events": [
{
"range": [
{
"introduced": "a9.4"
},
{
"last_affected": "a9.4"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:peoplesoft_enterprise_peopletools",
"extracted_events": [
{
"range": [
{
"introduced": "8.56"
},
{
"last_affected": "8.56"
},
{
"introduced": "8.57"
},
{
"last_affected": "8.57"
},
{
"introduced": "8.58"
},
{
"last_affected": "8.58"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2020-1971",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 443286,
"published_at": "2020-12-08T16:15:11.73+00:00"
}