Medium
Security advisory
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2021-29425
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 06:04 UTC · Revision 1
Source evidence
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.
osv:CVE-2021-29425
Complete source record
{
"id": "41093a5d8fee892481cc214a5454defa7db6bfaba4667298fb2369c47a19c4dc",
"url": "https://osv.dev/vulnerability/CVE-2021-29425",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2021-29425",
"summary": "In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.",
"evidence": "osv:CVE-2021-29425",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2021-29425",
"aliases": [
"CVE-2021-29425",
"GHSA-gwrp-pvrq-jmwv"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/apache/commons-io",
"type": "GIT",
"events": [
{
"introduced": "5d4d09928e154d083f396a1555da72dfe9d877d1"
},
{
"last_affected": "2ae025fe5c4a7d2046c53072b0898e37a079fe62"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:apache:commons_io:2.2:-:*:*:*:*:*:*",
"range": [
{
"introduced": "2.2-NA"
},
{
"last_affected": "2.2-NA"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:commons_io:2.3:-:*:*:*:*:*:*",
"range": [
{
"introduced": "2.3-NA"
},
{
"last_affected": "2.3-NA"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:commons_io:2.4:-:*:*:*:*:*:*",
"range": [
{
"introduced": "2.4-NA"
},
{
"last_affected": "2.4-NA"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:commons_io:2.5:-:*:*:*:*:*:*",
"range": [
{
"introduced": "2.5-NA"
},
{
"last_affected": "2.5-NA"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:commons_io:2.6:-:*:*:*:*:*:*",
"range": [
{
"introduced": "2.6-NA"
},
{
"last_affected": "2.6-NA"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"2.2-NA",
"2.3-NA",
"2.4-NA",
"2.5-NA",
"2.6-NA"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29425.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/helidon-io/helidon",
"type": "GIT",
"events": [
{
"introduced": "1c8537d139dc2e4e4e0114c0bf9aa3524be4b7eb"
},
{
"last_affected": "c6979cb5f47afb40b1920ba37f219eeae7f4eef1"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:oracle:helidon:1.4.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.4.7"
},
{
"last_affected": "1.4.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:helidon:2.2.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.2.0"
},
{
"last_affected": "2.2.0"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"1.4.7",
"2.2.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29425.json"
}
}
],
"modified": "2026-10-24T10:30:34.941072931Z",
"provider": "osv",
"references": [
"https://lists.apache.org/thread.html/r01b4a1fcdf3311c936ce33d75a9398b6c255f00c1a2f312ac21effe1%40%3Cnotifications.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/r0bfa8f7921abdfae788b1f076a12f73a92c93cc0a6e1083bce0027c5%40%3Cnotifications.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/r0d73e2071d1f1afe1a15da14c5b6feb2cf17e3871168d5a3c8451436%40%3Ccommits.pulsar.apache.org%3E",
"https://lists.apache.org/thread.html/r1c2f4683c35696cf6f863e3c107e37ec41305b1930dd40c17260de71%40%3Ccommits.pulsar.apache.org%3E",
"https://lists.apache.org/thread.html/r20416f39ca7f7344e7d76fe4d7063bb1d91ad106926626e7e83fb346%40%3Cnotifications.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/r2345b49dbffa8a5c3c589c082fe39228a2c1d14f11b96c523da701db%40%3Cnotifications.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E",
"https://lists.apache.org/thread.html/r27b1eedda37468256c4bb768fde1e8b79b37ec975cbbfd0d65a7ac34%40%3Cdev.myfaces.apache.org%3E",
"https://lists.apache.org/thread.html/r2bc986a070457daca457a54fe71ee09d2584c24dc262336ca32b6a19%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/r2df50af2641d38f432ef025cd2ba5858215cc0cf3fc10396a674ad2e%40%3Cpluto-scm.portals.apache.org%3E",
"https://lists.apache.org/thread.html/r345330b7858304938b7b8029d02537a116d75265a598c98fa333504a%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/r4050f9f6b42ebfa47a98cbdee4aabed4bb5fb8093db7dbb88faceba2%40%3Ccommits.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/r462db908acc1e37c455e11b1a25992b81efd18e641e7e0ceb1b6e046%40%3Cnotifications.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/r477c285126ada5c3b47946bb702cb222ac4e7fd3100c8549bdd6d3b2%40%3Cissues.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/r47ab6f68cbba8e730f42c4ea752f3a44eb95fb09064070f2476bb401%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/r5149f78be265be69d34eacb4e4b0fc7c9c697bcdfa91a1c1658d717b%40%3Cissues.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/r523a6ffad58f71c4f3761e3cee72df878e48cdc89ebdce933be1475c%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/r808be7d93b17a7055c1981a8453ae5f0d0fce5855407793c5d0ffffa%40%3Cuser.commons.apache.org%3E",
"https://lists.apache.org/thread.html/r8569a41d565ca880a4dee0e645dad1cd17ab4a92e68055ad9ebb7375%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/r86528f4b7d222aed7891e7ac03d69a0db2a2dfa17b86ac3470d7f374%40%3Cnotifications.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/r873d5ddafc0a68fd999725e559776dc4971d1ab39c0f5cc81bd9bc04%40%3Ccommits.pulsar.apache.org%3E",
"https://lists.apache.org/thread.html/r8bfc7235e6b39d90e6f446325a5a44c3e9e50da18860fdabcee23e29%40%3Cissues.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/r8efcbabde973ea72f5e0933adc48ef1425db5cde850bf641b3993f31%40%3Cdev.commons.apache.org%3E",
"https://lists.apache.org/thread.html/r92ea904f4bae190b03bd42a4355ce3c2fbe8f36ab673e03f6ca3f9fa%40%3Cnotifications.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/ra8ef65aedc086d2d3d21492b4c08ae0eb8a3a42cc52e29ba1bc009d8%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/raa053846cae9d497606027816ae87b4e002b2e0eb66cb0dee710e1f5%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/rad4ae544747df32ccd58fff5a86cd556640396aeb161aa71dd3d192a%40%3Cuser.commons.apache.org%3E",
"https://lists.apache.org/thread.html/rbebd3e19651baa7a4a5503a9901c95989df9d40602c8e35cb05d3eb5%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/rc10fa20ef4d13cbf6ebe0b06b5edb95466a1424a9b7673074ed03260%40%3Cnotifications.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/rc2dd3204260e9227a67253ef68b6f1599446005bfa0e1ddce4573a80%40%3Cpluto-dev.portals.apache.org%3E",
"https://lists.apache.org/thread.html/rc5f3df5316c5237b78a3dff5ab95b311ad08e61d418cd992ca7e34ae%40%3Cnotifications.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/rc65f9bc679feffe4589ea0981ee98bc0af9139470f077a91580eeee0%40%3Cpluto-dev.portals.apache.org%3E",
"https://lists.apache.org/thread.html/rca71a10ca533eb9bfac2d590533f02e6fb9064d3b6aa3ec90fdc4f51%40%3Cnotifications.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/rd09d4ab3e32e4b3a480e2ff6ff118712981ca82e817f28f2a85652a6%40%3Cnotifications.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/re41e9967bee064e7369411c28f0f5b2ad28b8334907c9c6208017279%40%3Cnotifications.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/red3aea910403d8620c73e1c7b9c9b145798d0469eb3298a7be7891af%40%3Cnotifications.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/rfa2f08b7c0caf80ca9f4a18bd875918fdd4e894e2ea47942a4589b9c%40%3Cdev.creadur.apache.org%3E",
"https://lists.apache.org/thread.html/rfcd2c649c205f12b72dde044f905903460669a220a2eb7e12652d19d%40%3Cdev.zookeeper.apache.org%3E",
"https://lists.apache.org/thread.html/rfd01af05babc95b8949e6d8ea78d9834699e1b06981040dde419a330%40%3Cdev.commons.apache.org%3E",
"https://lists.apache.org/thread.html/rc359823b5500e9a9a2572678ddb8e01d3505a7ffcadfa8d13b8780ab%40%3Cuser.commons.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/08/msg00016.html",
"https://security.netapp.com/advisory/ntap-20220210-0004/",
"https://www.oracle.com/security-alerts/cpuoct2021.html",
"https://issues.apache.org/jira/browse/IO-556",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujan2022.html",
"https://www.oracle.com/security-alerts/cpujul2022.html"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:oracle:banking_enterprise_default_managment:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:banking_enterprise_default_managment",
"extracted_events": [
{
"range": [
{
"introduced": "2.3.0"
},
{
"last_affected": "2.4.0"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:banking_platform",
"extracted_events": [
{
"range": [
{
"introduced": "2.3.0"
},
{
"last_affected": "2.4.1"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:blockchain_platform",
"extracted_events": [
{
"range": [
{
"fixed": "21.1.2"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_design_studio:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_design_studio",
"extracted_events": [
{
"range": [
{
"introduced": "7.4.0"
},
{
"last_affected": "7.4.2"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_diameter_intelligence_hub",
"extracted_events": [
{
"range": [
{
"introduced": "8.0.0"
},
{
"last_affected": "8.1.0"
},
{
"introduced": "8.2.0"
},
{
"last_affected": "8.2.3"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:financial_services_analytical_applications_infrastructure",
"extracted_events": [
{
"range": [
{
"introduced": "8.0.7"
},
{
"last_affected": "8.1.1"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:financial_services_model_management_and_governance:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:financial_services_model_management_and_governance",
"extracted_events": [
{
"range": [
{
"introduced": "8.0.8"
},
{
"last_affected": "8.1.1"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:flexcube_core_banking:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:flexcube_core_banking",
"extracted_events": [
{
"range": [
{
"introduced": "11.6.0"
},
{
"last_affected": "11.8.0"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:health_sciences_information_manager:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:health_sciences_information_manager",
"extracted_events": [
{
"range": [
{
"introduced": "3.0.1"
},
{
"last_affected": "3.0.4"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:oss_support_tools:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:oss_support_tools",
"extracted_events": [
{
"range": [
{
"fixed": "2.12.42"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:primavera_unifier",
"extracted_events": [
{
"range": [
{
"introduced": "17.7"
},
{
"last_affected": "17.12"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:rest_data_services:*:*:*:*:-:*:*:*"
],
"vendor_product": "oracle:rest_data_services",
"extracted_events": [
{
"range": [
{
"fixed": "21.2"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_integration_bus:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_integration_bus",
"extracted_events": [
{
"range": [
{
"introduced": "16.0.1"
},
{
"last_affected": "16.0.3"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_service_backbone:*:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_service_backbone",
"extracted_events": [
{
"range": [
{
"introduced": "16.0.1"
},
{
"last_affected": "16.0.3"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:access_manager:11.1.2.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:access_manager:12.2.1.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:access_manager:12.2.1.4.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:access_manager",
"extracted_events": [
{
"range": [
{
"introduced": "11.1.2.3.0"
},
{
"last_affected": "11.1.2.3.0"
},
{
"introduced": "12.2.1.3.0"
},
{
"last_affected": "12.2.1.3.0"
},
{
"introduced": "12.2.1.4.0"
},
{
"last_affected": "12.2.1.4.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:agile_engineering_data_management",
"extracted_events": [
{
"range": [
{
"introduced": "6.2.1.0"
},
{
"last_affected": "6.2.1.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:agile_product_lifecycle_management",
"extracted_events": [
{
"range": [
{
"introduced": "9.3.6"
},
{
"last_affected": "9.3.6"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:application_performance_management:13.4.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:application_performance_management:13.5.1.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:application_performance_management",
"extracted_events": [
{
"range": [
{
"introduced": "13.4.1.0"
},
{
"last_affected": "13.4.1.0"
},
{
"introduced": "13.5.1.0"
},
{
"last_affected": "13.5.1.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:application_testing_suite",
"extracted_events": [
{
"range": [
{
"introduced": "13.3.0.1"
},
{
"last_affected": "13.3.0.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:banking_apis:18.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_apis:18.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_apis:18.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_apis:19.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_apis:19.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_apis:20.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_apis:21.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:banking_apis",
"extracted_events": [
{
"range": [
{
"introduced": "18.1"
},
{
"last_affected": "18.1"
},
{
"introduced": "18.2"
},
{
"last_affected": "18.2"
},
{
"introduced": "18.3"
},
{
"last_affected": "18.3"
},
{
"introduced": "19.1"
},
{
"last_affected": "19.1"
},
{
"introduced": "19.2"
},
{
"last_affected": "19.2"
},
{
"introduced": "20.1"
},
{
"last_affected": "20.1"
},
{
"introduced": "21.1"
},
{
"last_affected": "21.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:banking_digital_experience:17.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_digital_experience:21.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:banking_digital_experience",
"extracted_events": [
{
"range": [
{
"introduced": "17.2"
},
{
"last_affected": "17.2"
},
{
"introduced": "18.1"
},
{
"last_affected": "18.1"
},
{
"introduced": "18.3"
},
{
"last_affected": "18.3"
},
{
"introduced": "19.1"
},
{
"last_affected": "19.1"
},
{
"introduced": "19.2"
},
{
"last_affected": "19.2"
},
{
"introduced": "20.1"
},
{
"last_affected": "20.1"
},
{
"introduced": "21.1"
},
{
"last_affected": "21.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_enterprise_default_management:2.6.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_enterprise_default_management:2.7.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_enterprise_default_management:2.7.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:banking_enterprise_default_management",
"extracted_events": [
{
"range": [
{
"introduced": "2.6.2"
},
{
"last_affected": "2.6.2"
},
{
"introduced": "2.7.0"
},
{
"last_affected": "2.7.0"
},
{
"introduced": "2.7.1"
},
{
"last_affected": "2.7.1"
},
{
"introduced": "2.10.0"
},
{
"last_affected": "2.10.0"
},
{
"introduced": "2.12.0"
},
{
"last_affected": "2.12.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:banking_party_management:2.7.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:banking_party_management",
"extracted_events": [
{
"range": [
{
"introduced": "2.7.0"
},
{
"last_affected": "2.7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_platform:2.7.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:banking_platform",
"extracted_events": [
{
"range": [
{
"introduced": "2.6.2"
},
{
"last_affected": "2.6.2"
},
{
"introduced": "2.7.0"
},
{
"last_affected": "2.7.0"
},
{
"introduced": "2.7.1"
},
{
"last_affected": "2.7.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:commerce_guided_search",
"extracted_events": [
{
"range": [
{
"introduced": "11.3.2"
},
{
"last_affected": "11.3.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_application_session_controller:3.9.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_application_session_controller",
"extracted_events": [
{
"range": [
{
"introduced": "3.9.0"
},
{
"last_affected": "3.9.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:11.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:12.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_billing_and_revenue_management_elastic_charging_engine",
"extracted_events": [
{
"range": [
{
"introduced": "11.3"
},
{
"last_affected": "11.3"
},
{
"introduced": "12.0"
},
{
"last_affected": "12.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.14.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_cloud_native_core_network_repository_function",
"extracted_events": [
{
"range": [
{
"introduced": "1.14.0"
},
{
"last_affected": "1.14.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_cloud_native_core_policy",
"extracted_events": [
{
"range": [
{
"introduced": "1.14.0"
},
{
"last_affected": "1.14.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.4.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_cloud_native_core_unified_data_repository",
"extracted_events": [
{
"range": [
{
"introduced": "1.4.0"
},
{
"last_affected": "1.4.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_contacts_server:8.0.0.6.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_contacts_server",
"extracted_events": [
{
"range": [
{
"introduced": "8.0.0.6.0"
},
{
"last_affected": "8.0.0.6.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.2:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_converged_application_server_-_service_controller",
"extracted_events": [
{
"range": [
{
"introduced": "6.2"
},
{
"last_affected": "6.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_convergence:3.0.2.2.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_convergence",
"extracted_events": [
{
"range": [
{
"introduced": "3.0.2.2.0"
},
{
"last_affected": "3.0.2.2.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_design_studio:7.3.5:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_design_studio",
"extracted_events": [
{
"range": [
{
"introduced": "7.3.5"
},
{
"last_affected": "7.3.5"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_interactive_session_recorder:6.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_interactive_session_recorder",
"extracted_events": [
{
"range": [
{
"introduced": "6.3"
},
{
"last_affected": "6.3"
},
{
"introduced": "6.4"
},
{
"last_affected": "6.4"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_offline_mediation_controller",
"extracted_events": [
{
"range": [
{
"introduced": "12.0.0.3"
},
{
"last_affected": "12.0.0.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_order_and_service_management:7.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:communications_order_and_service_management:7.4:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_order_and_service_management",
"extracted_events": [
{
"range": [
{
"introduced": "7.3"
},
{
"last_affected": "7.3"
},
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_policy_management:12.5.0.0.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_policy_management",
"extracted_events": [
{
"range": [
{
"introduced": "12.5.0.0.0"
},
{
"last_affected": "12.5.0.0.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.5.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_pricing_design_center",
"extracted_events": [
{
"range": [
{
"introduced": "12.0.0.4.0"
},
{
"last_affected": "12.0.0.4.0"
},
{
"introduced": "12.0.0.5.0"
},
{
"last_affected": "12.0.0.5.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_service_broker:6.2:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_service_broker",
"extracted_events": [
{
"range": [
{
"introduced": "6.2"
},
{
"last_affected": "6.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:enterprise_communications_broker:3.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:enterprise_communications_broker",
"extracted_events": [
{
"range": [
{
"introduced": "3.3"
},
{
"last_affected": "3.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:enterprise_session_border_controller:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:enterprise_session_border_controller",
"extracted_events": [
{
"range": [
{
"introduced": "8.4"
},
{
"last_affected": "8.4"
},
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:flexcube_core_banking:11.10.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:flexcube_core_banking:5.2.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:flexcube_core_banking",
"extracted_events": [
{
"range": [
{
"introduced": "5.2.0"
},
{
"last_affected": "5.2.0"
},
{
"introduced": "11.10.0"
},
{
"last_affected": "11.10.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.4.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:fusion_middleware_mapviewer",
"extracted_events": [
{
"range": [
{
"introduced": "12.2.1.4.0"
},
{
"last_affected": "12.2.1.4.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:health_sciences_data_management_workbench:2.5.2.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:health_sciences_data_management_workbench:3.0.0.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:health_sciences_data_management_workbench",
"extracted_events": [
{
"range": [
{
"introduced": "2.5.2.1"
},
{
"last_affected": "2.5.2.1"
},
{
"introduced": "3.0.0.0"
},
{
"last_affected": "3.0.0.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:healthcare_data_repository:8.1.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:healthcare_data_repository",
"extracted_events": [
{
"range": [
{
"introduced": "8.1.0"
},
{
"last_affected": "8.1.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:insurance_policy_administration:11.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:insurance_policy_administration:11.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:insurance_policy_administration:11.2.8:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:insurance_policy_administration:11.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:insurance_policy_administration:11.3.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:insurance_policy_administration",
"extracted_events": [
{
"range": [
{
"introduced": "11.0.2"
},
{
"last_affected": "11.0.2"
},
{
"introduced": "11.1.0"
},
{
"last_affected": "11.1.0"
},
{
"introduced": "11.2.8"
},
{
"last_affected": "11.2.8"
},
{
"introduced": "11.3.0"
},
{
"last_affected": "11.3.0"
},
{
"introduced": "11.3.1"
},
{
"last_affected": "11.3.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:insurance_rules_palette:11.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:insurance_rules_palette:11.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:insurance_rules_palette:11.2.8:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:insurance_rules_palette:11.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:insurance_rules_palette:11.3.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:insurance_rules_palette",
"extracted_events": [
{
"range": [
{
"introduced": "11.0.2"
},
{
"last_affected": "11.0.2"
},
{
"introduced": "11.1.0"
},
{
"last_affected": "11.1.0"
},
{
"introduced": "11.2.8"
},
{
"last_affected": "11.2.8"
},
{
"introduced": "11.3.0"
},
{
"last_affected": "11.3.0"
},
{
"introduced": "11.3.1"
},
{
"last_affected": "11.3.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:primavera_unifier",
"extracted_events": [
{
"range": [
{
"introduced": "18.8"
},
{
"last_affected": "18.8"
},
{
"introduced": "19.12"
},
{
"last_affected": "19.12"
},
{
"introduced": "20.12"
},
{
"last_affected": "20.12"
},
{
"introduced": "21.12"
},
{
"last_affected": "21.12"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:real_user_experience_insight:13.4.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:real_user_experience_insight:13.5.1.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:real_user_experience_insight",
"extracted_events": [
{
"range": [
{
"introduced": "13.4.1.0"
},
{
"last_affected": "13.4.1.0"
},
{
"introduced": "13.5.1.0"
},
{
"last_affected": "13.5.1.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:rest_data_services:21.3:*:*:*:-:*:*:*"
],
"vendor_product": "oracle:rest_data_services",
"extracted_events": [
{
"range": [
{
"introduced": "21.3"
},
{
"last_affected": "21.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_assortment_planning:16.0.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_assortment_planning",
"extracted_events": [
{
"range": [
{
"introduced": "16.0.3"
},
{
"last_affected": "16.0.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_integration_bus:13.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_integration_bus:14.1.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_integration_bus:15.0.3.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_integration_bus:19.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_integration_bus:19.0.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_integration_bus",
"extracted_events": [
{
"range": [
{
"introduced": "13.0"
},
{
"last_affected": "13.0"
},
{
"introduced": "14.1.3.0"
},
{
"last_affected": "14.1.3.0"
},
{
"introduced": "14.1.3.2"
},
{
"last_affected": "14.1.3.2"
},
{
"introduced": "15.0.3.1"
},
{
"last_affected": "15.0.3.1"
},
{
"introduced": "19.0.0"
},
{
"last_affected": "19.0.0"
},
{
"introduced": "19.0.1"
},
{
"last_affected": "19.0.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_merchandising_system:19.0.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_merchandising_system",
"extracted_events": [
{
"range": [
{
"introduced": "16.0.3"
},
{
"last_affected": "16.0.3"
},
{
"introduced": "19.0.1"
},
{
"last_affected": "19.0.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_order_broker:18.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_order_broker:19.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_order_broker",
"extracted_events": [
{
"range": [
{
"introduced": "16.0"
},
{
"last_affected": "16.0"
},
{
"introduced": "18.0"
},
{
"last_affected": "18.0"
},
{
"introduced": "19.1"
},
{
"last_affected": "19.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_pricing:19.0.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_pricing",
"extracted_events": [
{
"range": [
{
"introduced": "19.0.1"
},
{
"last_affected": "19.0.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_service_backbone:14.1.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_service_backbone:15.0.3.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_service_backbone:19.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_service_backbone:19.0.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_service_backbone",
"extracted_events": [
{
"range": [
{
"introduced": "14.1.3.0"
},
{
"last_affected": "14.1.3.0"
},
{
"introduced": "14.1.3.2"
},
{
"last_affected": "14.1.3.2"
},
{
"introduced": "15.0.3.1"
},
{
"last_affected": "15.0.3.1"
},
{
"introduced": "19.0.0"
},
{
"last_affected": "19.0.0"
},
{
"introduced": "19.0.1"
},
{
"last_affected": "19.0.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_size_profile_optimization:16.0.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_size_profile_optimization",
"extracted_events": [
{
"range": [
{
"introduced": "16.0.3"
},
{
"last_affected": "16.0.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_xstore_point_of_service",
"extracted_events": [
{
"range": [
{
"introduced": "17.0.4"
},
{
"last_affected": "17.0.4"
},
{
"introduced": "18.0.3"
},
{
"last_affected": "18.0.3"
},
{
"introduced": "19.0.2"
},
{
"last_affected": "19.0.2"
},
{
"introduced": "20.0.1"
},
{
"last_affected": "20.0.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:solaris_cluster:4.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:solaris_cluster",
"extracted_events": [
{
"range": [
{
"introduced": "4.0"
},
{
"last_affected": "4.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.1.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.2.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.3.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:utilities_testing_accelerator",
"extracted_events": [
{
"range": [
{
"introduced": "6.0.0.1.1"
},
{
"last_affected": "6.0.0.1.1"
},
{
"introduced": "6.0.0.2.2"
},
{
"last_affected": "6.0.0.2.2"
},
{
"introduced": "6.0.0.3.1"
},
{
"last_affected": "6.0.0.3.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:webcenter_portal",
"extracted_events": [
{
"range": [
{
"introduced": "12.2.1.3.0"
},
{
"last_affected": "12.2.1.3.0"
},
{
"introduced": "12.2.1.4.0"
},
{
"last_affected": "12.2.1.4.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:weblogic_server",
"extracted_events": [
{
"range": [
{
"introduced": "12.1.3.0.0"
},
{
"last_affected": "12.1.3.0.0"
},
{
"introduced": "12.2.1.3.0"
},
{
"last_affected": "12.2.1.3.0"
},
{
"introduced": "12.2.1.4.0"
},
{
"last_affected": "12.2.1.4.0"
},
{
"introduced": "14.1.1.0.0"
},
{
"last_affected": "14.1.1.0.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2021-29425",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 433648,
"published_at": "2021-04-13T07:15:12.327+00:00"
}