Vulnerabilities > CVE-2020-28500

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

LOW

network

low complexity

lodash

oracle

siemens

NVD

Published: 2021-02-15

Updated: 2024-11-21

Summary

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

Vulnerable Configurations

Part	Description	Count
Application	Lodash Lodash Lodash 0.1.0 Lodash Lodash 0.2.0 Lodash Lodash 0.2.1 Lodash Lodash 0.2.2 Lodash Lodash 0.3.0 Lodash Lodash 0.3.1 Lodash Lodash 0.3.2 Lodash Lodash 0.4.0 Lodash Lodash 0.4.1 Lodash Lodash 0.4.2 Lodash Lodash 0.5.0 Lodash Lodash 0.5.1 Lodash Lodash 0.5.2 Lodash Lodash 0.6.0 Lodash Lodash 0.6.1 Lodash Lodash 0.7.0 Lodash Lodash 0.8.0 Lodash Lodash 0.8.1 Lodash Lodash 0.8.2 Lodash Lodash 0.9.0 Lodash Lodash 0.9.1 Lodash Lodash 0.9.2 Lodash Lodash 0.10.0 Lodash Lodash 1.0.0 Lodash Lodash 1.0.1 Lodash Lodash 1.0.2 Lodash Lodash 1.1.0 Lodash Lodash 1.1.1 Lodash Lodash 1.2.0 Lodash Lodash 1.2.1 Lodash Lodash 1.3.0 Lodash Lodash 1.3.1 Lodash Lodash 2.0.0 Lodash Lodash 2.1.0 Lodash Lodash 2.2.0 Lodash Lodash 2.2.1 Lodash Lodash 2.3.0 Lodash Lodash 2.4.0 Lodash Lodash 2.4.1 Lodash Lodash 2.4.2 Lodash Lodash 3.0.0 Lodash Lodash 3.0.1 Lodash Lodash 3.0.2 Lodash Lodash 3.0.3 Lodash Lodash 3.0.4 Lodash Lodash 3.0.5 Lodash Lodash 3.0.6 Lodash Lodash 3.0.7 Lodash Lodash 3.0.8 Lodash Lodash 3.0.9 Lodash Lodash 3.1.0 Lodash Lodash 3.1.1 Lodash Lodash 3.1.2 Lodash Lodash 3.1.3 Lodash Lodash 3.1.4 Lodash Lodash 3.1.5 Lodash Lodash 3.1.6 Lodash Lodash 3.1.7 Lodash Lodash 3.2.0 Lodash Lodash 3.2.1 Lodash Lodash 3.2.2 Lodash Lodash 3.2.3 Lodash Lodash 3.3.0 Lodash Lodash 3.3.1 Lodash Lodash 3.3.2 Lodash Lodash 3.3.3 Lodash Lodash 3.3.4 Lodash Lodash 3.3.5 Lodash Lodash 3.3.6 Lodash Lodash 3.3.7 Lodash Lodash 3.4.0 Lodash Lodash 3.4.1 Lodash Lodash 3.4.2 Lodash Lodash 3.4.3 Lodash Lodash 3.4.4 Lodash Lodash 3.5.0 Lodash Lodash 3.5.1 Lodash Lodash 3.5.2 Lodash Lodash 3.5.3 Lodash Lodash 3.6.0 Lodash Lodash 3.6.1 Lodash Lodash 3.6.2 Lodash Lodash 3.7.0 Lodash Lodash 3.7.1 Lodash Lodash 3.7.2 Lodash Lodash 3.7.3 Lodash Lodash 3.7.4 Lodash Lodash 3.8.0 Lodash Lodash 3.8.1 Lodash Lodash 3.8.2 Lodash Lodash 3.9.0 Lodash Lodash 3.9.1 Lodash Lodash 3.9.2 Lodash Lodash 3.9.3 Lodash Lodash 3.10.0 Lodash Lodash 3.10.1 Lodash Lodash 3.10.2 Lodash Lodash 3.10.3 Lodash Lodash 3.11.0 Lodash Lodash 4.0.0 Lodash Lodash 4.0.1 Lodash Lodash 4.0.2 Lodash Lodash 4.0.3 Lodash Lodash 4.0.4 Lodash Lodash 4.0.5 Lodash Lodash 4.0.6 Lodash Lodash 4.0.7 Lodash Lodash 4.0.8 Lodash Lodash 4.0.9 Lodash Lodash 4.1.0 Lodash Lodash 4.1.1 Lodash Lodash 4.1.2 Lodash Lodash 4.1.3 Lodash Lodash 4.1.4 Lodash Lodash 4.1.5 Lodash Lodash 4.2.0 Lodash Lodash 4.2.1 Lodash Lodash 4.2.2 Lodash Lodash 4.2.3 Lodash Lodash 4.2.4 Lodash Lodash 4.2.5 Lodash Lodash 4.3.0 Lodash Lodash 4.3.1 Lodash Lodash 4.3.2 Lodash Lodash 4.3.3 Lodash Lodash 4.3.4 Lodash Lodash 4.3.5 Lodash Lodash 4.4.0 Lodash Lodash 4.4.1 Lodash Lodash 4.4.2 Lodash Lodash 4.4.3 Lodash Lodash 4.5.0 Lodash Lodash 4.5.1 Lodash Lodash 4.5.2 Lodash Lodash 4.5.3 Lodash Lodash 4.5.4 Lodash Lodash 4.5.5 Lodash Lodash 4.5.6 Lodash Lodash 4.5.7 Lodash Lodash 4.6.0 Lodash Lodash 4.6.1 Lodash Lodash 4.6.2 Lodash Lodash 4.7.0 Lodash Lodash 4.7.1 Lodash Lodash 4.8.0 Lodash Lodash 4.8.1 Lodash Lodash 4.8.2 Lodash Lodash 4.9.0 Lodash Lodash 4.9.1 Lodash Lodash 4.10.0 Lodash Lodash 4.10.1 Lodash Lodash 4.10.2 Lodash Lodash 4.11.0 Lodash Lodash 4.11.1 Lodash Lodash 4.11.2 Lodash Lodash 4.12.0 Lodash Lodash 4.12.1 Lodash Lodash 4.13.0 Lodash Lodash 4.13.1 Lodash Lodash 4.14.0 Lodash Lodash 4.14.1 Lodash Lodash 4.14.2 Lodash Lodash 4.15.0 Lodash Lodash 4.16.0 Lodash Lodash 4.16.1 Lodash Lodash 4.16.2 Lodash Lodash 4.16.3 Lodash Lodash 4.16.4 Lodash Lodash 4.16.5 Lodash Lodash 4.16.6 Lodash Lodash 4.17.0 Lodash Lodash 4.17.1 Lodash Lodash 4.17.2 Lodash Lodash 4.17.3 Lodash Lodash 4.17.4 Lodash Lodash 4.17.5 Lodash Lodash 4.17.6 Lodash Lodash 4.17.7 Lodash Lodash 4.17.8 Lodash Lodash 4.17.9 Lodash Lodash 4.17.10 Lodash Lodash 4.17.11 Lodash Lodash 4.17.12 Lodash Lodash 4.17.13 Lodash Lodash 4.17.14 Lodash Lodash 4.17.15 Lodash Lodash 4.17.16 Lodash Lodash 4.17.17 Lodash Lodash 4.17.18 Lodash Lodash 4.17.19 Lodash Lodash 4.17.20	195
Application	Oracle Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 17.7 Oracle Primavera Unifier 17.8 Oracle Primavera Unifier 17.9 Oracle Primavera Unifier 17.10 Oracle Primavera Unifier 17.11 Oracle Primavera Unifier 17.12 Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Retail Customer Management AND Segmentation Foundation 19.0 Oracle Communications Services Gatekeeper 7.0 Oracle Enterprise Communications Broker 3.2.0 Oracle Enterprise Communications Broker 3.3.0 Oracle Banking Extensibility Workbench 14.3.0 Oracle Banking Extensibility Workbench 14.2.0 Oracle Banking Extensibility Workbench 14.5.0 Oracle Banking Trade Finance Process Management 14.3.0 Oracle Banking Trade Finance Process Management 14.5.0 Oracle Banking Trade Finance Process Management 14.2.0 Oracle Banking Credit Facilities Process Management 14.3.0 Oracle Banking Credit Facilities Process Management 14.2.0 Oracle Banking Credit Facilities Process Management 14.5.0 Oracle Banking Corporate Lending Process Management 14.3.0 Oracle Banking Corporate Lending Process Management 14.2.0 Oracle Banking Corporate Lending Process Management 14.5.0 Oracle Primavera Gateway 17.12.0 Oracle Primavera Gateway 17.12.6 Oracle Primavera Gateway 17.12.7 Oracle Primavera Gateway 17.12.8 Oracle Primavera Gateway 17.12.9 Oracle Primavera Gateway 17.12.10 Oracle Primavera Gateway 17.12.11 Oracle Primavera Gateway 20.12.0 Oracle Primavera Gateway 20.12.7 Oracle Primavera Gateway 19.12.0 Oracle Primavera Gateway 19.12.4 Oracle Primavera Gateway 19.12.10 Oracle Primavera Gateway 19.12.11 Oracle Primavera Gateway 18.8.0 Oracle Primavera Gateway 18.8.8 Oracle Primavera Gateway 18.8.8.1 Oracle Primavera Gateway 18.8.9 Oracle Primavera Gateway 18.8.11 Oracle Primavera Gateway 18.8.12 Oracle Communications Session Border Controller 8.4 Oracle Communications Session Border Controller 9.0 Oracle Banking Supply Chain Finance 14.2.0 Oracle Banking Supply Chain Finance 14.5.0 Oracle Banking Supply Chain Finance 14.3.0 Oracle Communications Design Studio 7.4.2 Oracle Communications Cloud Native Core Policy 1.11.0 Oracle JD Edwards Enterpriseone Tools - Oracle JD Edwards Enterpriseone Tools 4.0.1.0 Oracle JD Edwards Enterpriseone Tools 9.1 Oracle JD Edwards Enterpriseone Tools 9.1.5 Oracle JD Edwards Enterpriseone Tools 9.2 Oracle JD Edwards Enterpriseone Tools 9.2.4.0 Oracle JD Edwards Enterpriseone Tools 9.2.4.2 Oracle JD Edwards Enterpriseone Tools 9.2.5.0 Oracle JD Edwards Enterpriseone Tools 9.2.5.3 Oracle JD Edwards Enterpriseone Tools 9.2.6.0 Oracle JD Edwards Enterpriseone Tools 9.2.6.1 Oracle Health Sciences Data Management Workbench 2.5.2.1 Oracle Health Sciences Data Management Workbench 3.0.0.0 Oracle Financial Services Crime AND Compliance Management Studio 8.0.8.2.0 Oracle Financial Services Crime AND Compliance Management Studio 8.0.8.3.0	68
Application	Siemens Siemens Sinec INS 1.0 Siemens Sinec INS -	3

Vulnerabilities > CVE-2020-28500 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-28500"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-28500