Vulnerabilities > CVE-2020-13956

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

NVD

Published: 2020-12-02

Updated: 2024-11-21

Summary

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Vulnerable Configurations

Part	Description	Count
Application	Apache Apache Httpclient 5.0.0 Apache Httpclient 5.0.1 Apache Httpclient 5.0.2 Apache Httpclient 3.1 Apache Httpclient 4.0 Apache Httpclient 4.0.1 Apache Httpclient 4.1 Apache Httpclient 4.1.1 Apache Httpclient 4.1.2 Apache Httpclient 4.2 Apache Httpclient 4.2.1 Apache Httpclient 4.2.2 Apache Httpclient 4.2.3 Apache Httpclient 4.3 Apache Httpclient 4.3.1 Apache Httpclient 4.3.2 Apache Httpclient 4.3.3 Apache Httpclient 4.3.4 Apache Httpclient 4.3.5 Apache Httpclient 4.4.1 Apache Httpclient 4.5 Apache Httpclient 4.5.1 Apache Httpclient 4.5.2 Apache Httpclient 4.5.3 Apache Httpclient 4.5.4 Apache Httpclient 4.5.5 Apache Httpclient 4.5.6 Apache Httpclient 4.5.7 Apache Httpclient 4.5.8 Apache Httpclient 4.5.9 Apache Httpclient 4.5.10 Apache Httpclient 4.5.11 Apache Httpclient 4.5.12	57
Application	Quarkus Quarkus Quarkus 0.0.1 Quarkus Quarkus 0.1.0 Quarkus Quarkus 0.2.0 Quarkus Quarkus 0.3.0 Quarkus Quarkus 0.4.0 Quarkus Quarkus 0.5.0 Quarkus Quarkus 0.6.0 Quarkus Quarkus 0.7.0 Quarkus Quarkus 0.8.0 Quarkus Quarkus 0.9.0 Quarkus Quarkus 0.9.1 Quarkus Quarkus 0.10.0 Quarkus Quarkus 0.11.0 Quarkus Quarkus 0.12.0 Quarkus Quarkus 0.13.0 Quarkus Quarkus 0.13.1 Quarkus Quarkus 0.13.2 Quarkus Quarkus 0.13.3 Quarkus Quarkus 0.14.0 Quarkus Quarkus 0.15.0 Quarkus Quarkus 0.16.0 Quarkus Quarkus 0.16.1 Quarkus Quarkus 0.17.0 Quarkus Quarkus 0.18.0 Quarkus Quarkus 0.19.0 Quarkus Quarkus 0.19.1 Quarkus Quarkus 0.20.0 Quarkus Quarkus 0.21.0 Quarkus Quarkus 0.21.1 Quarkus Quarkus 0.21.2 Quarkus Quarkus 0.22.0 Quarkus Quarkus 0.23.0 Quarkus Quarkus 0.23.1 Quarkus Quarkus 0.23.2 Quarkus Quarkus 0.24.0 Quarkus Quarkus 0.25.0 Quarkus Quarkus 0.26.0 Quarkus Quarkus 0.26.1 Quarkus Quarkus 0.27.0 Quarkus Quarkus 0.28.0 Quarkus Quarkus 0.28.1 Quarkus Quarkus 1.0.0 Quarkus Quarkus 1.0.1 Quarkus Quarkus 1.1.0 Quarkus Quarkus 1.1.1 Quarkus Quarkus 1.2.0 Quarkus Quarkus 1.2.1 Quarkus Quarkus 1.3.0 Quarkus Quarkus 1.3.1 Quarkus Quarkus 1.3.2 Quarkus Quarkus 1.3.3 Quarkus Quarkus 1.3.4 Quarkus Quarkus 1.4.0 Quarkus Quarkus 1.4.1 Quarkus Quarkus 1.4.2 Quarkus Quarkus 1.5.0 Quarkus Quarkus 1.5.1 Quarkus Quarkus 1.5.2 Quarkus Quarkus 1.6.0 Quarkus Quarkus 1.6.1 Quarkus Quarkus 1.7.0 Quarkus Quarkus 1.7.1 Quarkus Quarkus 1.7.2 Quarkus Quarkus 1.7.3 Quarkus Quarkus 1.7.4 Quarkus Quarkus 1.7.5	90
Application	Oracle Oracle Primavera Unifier 16.2 Oracle Primavera Unifier 16.1 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 17.7 Oracle Primavera Unifier 17.8 Oracle Primavera Unifier 17.9 Oracle Primavera Unifier 17.10 Oracle Primavera Unifier 17.11 Oracle Primavera Unifier 17.12 Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Data Integrator 12.2.1.3.0 Oracle Data Integrator 12.2.1.4.0 Oracle Peoplesoft Enterprise PT Peopletools 8.57 Oracle Peoplesoft Enterprise PT Peopletools 8.59 Oracle Peoplesoft Enterprise PT Peopletools 8.58 Oracle Nosql Database 19.3.12 Oracle Retail Customer Management AND Segmentation Foundation 16.0 Oracle Retail Customer Management AND Segmentation Foundation 16.0.1 Oracle Retail Customer Management AND Segmentation Foundation 16.0.2 Oracle Retail Customer Management AND Segmentation Foundation 17.0 Oracle Retail Customer Management AND Segmentation Foundation 17.0.1 Oracle Retail Customer Management AND Segmentation Foundation 18.0 Oracle Retail Customer Management AND Segmentation Foundation 18.1 Oracle Retail Customer Management AND Segmentation Foundation 19.0 Oracle SQL Developer - Oracle SQL Developer 11.2.0.4 Oracle SQL Developer 12.1.0.2 Oracle SQL Developer 12.2.0.1 Oracle SQL Developer 18C Oracle SQL Developer 20.4.1.407.0006 Oracle Spatial Studio - Oracle Spatial Studio 19.1.0 Oracle JD Edwards Enterpriseone Tools - Oracle JD Edwards Enterpriseone Tools 4.0.1.0 Oracle JD Edwards Enterpriseone Tools 9.1 Oracle JD Edwards Enterpriseone Tools 9.1.5 Oracle JD Edwards Enterpriseone Tools 9.2 Oracle JD Edwards Enterpriseone Tools 9.2.4.0 Oracle JD Edwards Enterpriseone Tools 9.2.4.2 Oracle JD Edwards Enterpriseone Tools 9.2.5.0 Oracle JD Edwards Enterpriseone Tools 9.2.5.3 Oracle JD Edwards Enterpriseone Tools 9.2.6.0 Oracle JD Edwards Enterpriseone Orchestrator - Oracle JD Edwards Enterpriseone Orchestrator 9.2 Oracle JD Edwards Enterpriseone Orchestrator 9.2.4.2 Oracle JD Edwards Enterpriseone Orchestrator 9.2.5.0 Oracle JD Edwards Enterpriseone Orchestrator 9.2.5.1 Oracle JD Edwards Enterpriseone Orchestrator 9.2.5.3 Oracle Weblogic Server 12.2.1.4.0 Oracle Weblogic Server 14.1.1.0.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0	55
Application	Netapp Netapp Snapcenter - Netapp Active IQ Unified Manager -	4

Vulnerabilities > CVE-2020-13956 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-13956"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-13956