{"cve":{"cve_id":"CVE-2020-10683","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.07269,"epss_percentile":0.93881,"epss_as_of":"2026-08-26","description":"dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.","published_at":"2020-05-01T18:55:25Z","last_modified_at":"2026-08-25T16:28:27.310000Z","cvss_v3_score":9.8,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_v3_severity":"CRITICAL","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":["CWE-611"],"nvd_references":["http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00061.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html","https://bugzilla.redhat.com/show_bug.cgi?id=1694235","https://github.com/dom4j/dom4j/releases/tag/version-2.1.3","https://github.com/dom4j/dom4j/commit/a8228522a99a02146106672a34c104adbda5c658","https://security.netapp.com/advisory/ntap-20200518-0002/","https://usn.ubuntu.com/4575-1/","https://www.oracle.com/security-alerts/cpuoct2020.html","https://github.com/dom4j/dom4j/issues/87","https://github.com/dom4j/dom4j/commits/version-2.0.3","https://lists.apache.org/thread.html/r51f3f9801058e47153c0ad9bc6209d57a592fc0e7aefd787760911b8%40%3Cdev.velocity.apache.org%3E","https://lists.apache.org/thread.html/r91c64cd51e68e97d524395474eaa25362d564572276b9917fcbf5c32%40%3Cdev.velocity.apache.org%3E","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com//security-alerts/cpujul2021.html","https://lists.apache.org/thread.html/rb1b990d7920ae0d50da5109b73b92bab736d46c9788dd4b135cb1a51%40%3Cnotifications.freemarker.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html"],"vuln_status":"Modified","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-08-26T01:37:50.379810Z"},"effective_severity":"CRITICAL","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"H","value_label":"High"},{"metric":"A","name":"Availability","value":"H","value_label":"High"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"canonical","vendor_name":"Canonical","product_slug":"ubuntu-linux","product_name":"Ubuntu Linux","version_start":"16.04","version_start_inclusive":true,"version_end":"16.04","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*"},{"vendor_slug":"dom4j-project","vendor_name":"dom4j_project","product_slug":"dom4j","product_name":"dom4j","version_start":null,"version_start_inclusive":null,"version_end":"2.0.3","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:dom4j_project:dom4j:*:*:*:*:*:*:*:*"},{"vendor_slug":"netapp","vendor_name":"NETAPP","product_slug":"oncommand-api-services","product_name":"oncommand_api_services","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:a:netapp:oncommand_api_services:-:*:*:*:*:*:*:*"},{"vendor_slug":"netapp","vendor_name":"NETAPP","product_slug":"oncommand-workflow-automation","product_name":"OnCommand Workflow Automation","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*"},{"vendor_slug":"netapp","vendor_name":"NETAPP","product_slug":"snapcenter","product_name":"SnapCenter","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*"},{"vendor_slug":"netapp","vendor_name":"NETAPP","product_slug":"snap-creator-framework","product_name":"snap_creator_framework","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*"},{"vendor_slug":"netapp","vendor_name":"NETAPP","product_slug":"snapmanager","product_name":"snapmanager","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*"},{"vendor_slug":"netapp","vendor_name":"NETAPP","product_slug":"snapmanager","product_name":"snapmanager","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*"},{"vendor_slug":"opensuse","vendor_name":"openSUSE","product_slug":"leap","product_name":"Leap","version_start":"15.1","version_start_inclusive":true,"version_end":"15.1","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"agile-product-lifecycle-management","product_name":"agile_product_lifecycle_management","version_start":"9.3.3","version_start_inclusive":true,"version_end":"9.3.3","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.3:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"agile-product-lifecycle-management","product_name":"agile_product_lifecycle_management","version_start":"9.3.5","version_start_inclusive":true,"version_end":"9.3.5","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"application-testing-suite","product_name":"Application Testing Suite","version_start":"13.3.0.1","version_start_inclusive":true,"version_end":"13.3.0.1","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"banking-platform","product_name":"banking_platform","version_start":"2.4.0","version_start_inclusive":true,"version_end":"2.10.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"business-process-management-suite","product_name":"business_process_management_suite","version_start":"12.2.1.3.0","version_start_inclusive":true,"version_end":"12.2.1.3.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"business-process-management-suite","product_name":"business_process_management_suite","version_start":"12.2.1.4.0","version_start_inclusive":true,"version_end":"12.2.1.4.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"communications-application-session-controller","product_name":"communications_application_session_controller","version_start":"3.9m0p1","version_start_inclusive":true,"version_end":"3.9m0p1","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:communications_application_session_controller:3.9m0p1:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"communications-diameter-signaling-router","product_name":"communications_diameter_signaling_router","version_start":"8.0.0","version_start_inclusive":true,"version_end":"8.2.2","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"communications-unified-inventory-management","product_name":"communications_unified_inventory_management","version_start":"7.3.0","version_start_inclusive":true,"version_end":"7.3.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"communications-unified-inventory-management","product_name":"communications_unified_inventory_management","version_start":"7.4.0","version_start_inclusive":true,"version_end":"7.4.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"data-integrator","product_name":"data_integrator","version_start":"12.2.1.4.0","version_start_inclusive":true,"version_end":"12.2.1.4.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"data-integrator","product_name":"data_integrator","version_start":"12.2.1.3.0","version_start_inclusive":true,"version_end":"12.2.1.3.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"documaker","product_name":"documaker","version_start":"12.6.0","version_start_inclusive":true,"version_end":"12.6.4","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:documaker:*:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"endeca-information-discovery-integrator","product_name":"endeca_information_discovery_integrator","version_start":"3.2.0","version_start_inclusive":true,"version_end":"3.2.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:endeca_information_discovery_integrator:3.2.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"enterprise-data-quality","product_name":"enterprise_data_quality","version_start":"11.1.1.9.0","version_start_inclusive":true,"version_end":"11.1.1.9.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:enterprise_data_quality:11.1.1.9.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"enterprise-data-quality","product_name":"enterprise_data_quality","version_start":"12.2.1.3.0","version_start_inclusive":true,"version_end":"12.2.1.3.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"enterprise-manager-base-platform","product_name":"enterprise_manager_base_platform","version_start":"13.4.0.0","version_start_inclusive":true,"version_end":"13.4.0.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"financial-services-analytical-applications-infrastructure","product_name":"financial_services_analytical_applications_infrastructure","version_start":"8.0.6","version_start_inclusive":true,"version_end":"8.1.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"flexcube-core-banking","product_name":"FLEXCUBE Core Banking","version_start":"11.10.0","version_start_inclusive":true,"version_end":"11.10.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:flexcube_core_banking:11.10.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"flexcube-core-banking","product_name":"FLEXCUBE Core Banking","version_start":"11.7.0","version_start_inclusive":true,"version_end":"11.7.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:flexcube_core_banking:11.7.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"flexcube-core-banking","product_name":"FLEXCUBE Core Banking","version_start":"11.8.0","version_start_inclusive":true,"version_end":"11.8.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:flexcube_core_banking:11.8.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"flexcube-core-banking","product_name":"FLEXCUBE Core Banking","version_start":"11.9.0","version_start_inclusive":true,"version_end":"11.9.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:flexcube_core_banking:11.9.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"fusion-middleware","product_name":"fusion_middleware","version_start":"12.2.1.4.0","version_start_inclusive":true,"version_end":"12.2.1.4.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"health-sciences-empirica-signal","product_name":"health_sciences_empirica_signal","version_start":"9.0","version_start_inclusive":true,"version_end":"9.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:health_sciences_empirica_signal:9.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"health-sciences-information-manager","product_name":"health_sciences_information_manager","version_start":"3.0.1","version_start_inclusive":true,"version_end":"3.0.1","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:health_sciences_information_manager:3.0.1:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"insurance-policy-administration-j2ee","product_name":"insurance_policy_administration_j2ee","version_start":"11.1.0","version_start_inclusive":true,"version_end":"11.3.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:insurance_policy_administration_j2ee:*:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"insurance-policy-administration-j2ee","product_name":"insurance_policy_administration_j2ee","version_start":"10.2.0","version_start_inclusive":true,"version_end":"10.2.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:insurance_policy_administration_j2ee:10.2.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"insurance-policy-administration-j2ee","product_name":"insurance_policy_administration_j2ee","version_start":"11.0.2","version_start_inclusive":true,"version_end":"11.0.2","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:insurance_policy_administration_j2ee:11.0.2:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"insurance-policy-administration-j2ee","product_name":"insurance_policy_administration_j2ee","version_start":"10.2.4","version_start_inclusive":true,"version_end":"10.2.4","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:insurance_policy_administration_j2ee:10.2.4:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"insurance-rules-palette","product_name":"insurance_rules_palette","version_start":"11.1.0","version_start_inclusive":true,"version_end":"11.3.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:insurance_rules_palette:*:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"insurance-rules-palette","product_name":"insurance_rules_palette","version_start":"11.0.2","version_start_inclusive":true,"version_end":"11.0.2","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:insurance_rules_palette:11.0.2:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"insurance-rules-palette","product_name":"insurance_rules_palette","version_start":"10.2.4","version_start_inclusive":true,"version_end":"10.2.4","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:insurance_rules_palette:10.2.4:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"insurance-rules-palette","product_name":"insurance_rules_palette","version_start":"10.2.0","version_start_inclusive":true,"version_end":"10.2.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:insurance_rules_palette:10.2.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"jdeveloper","product_name":"JDeveloper","version_start":"12.2.1.4.0","version_start_inclusive":true,"version_end":"12.2.1.4.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"primavera-p6-enterprise-project-portfolio-management","product_name":"primavera_p6_enterprise_project_portfolio_management","version_start":"16.1.0.0","version_start_inclusive":true,"version_end":"16.2.20.1","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"rapid-planning","product_name":"rapid_planning","version_start":"12.2","version_start_inclusive":true,"version_end":"12.2","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:rapid_planning:12.2:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"rapid-planning","product_name":"rapid_planning","version_start":"12.1","version_start_inclusive":true,"version_end":"12.1","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:rapid_planning:12.1:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-customer-management-and-segmentation-foundation","product_name":"retail_customer_management_and_segmentation_foundation","version_start":"19.0","version_start_inclusive":true,"version_end":"19.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-customer-management-and-segmentation-foundation","product_name":"retail_customer_management_and_segmentation_foundation","version_start":"16.0","version_start_inclusive":true,"version_end":"16.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:16.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-customer-management-and-segmentation-foundation","product_name":"retail_customer_management_and_segmentation_foundation","version_start":"17.0","version_start_inclusive":true,"version_end":"17.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:17.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-customer-management-and-segmentation-foundation","product_name":"retail_customer_management_and_segmentation_foundation","version_start":"18.0","version_start_inclusive":true,"version_end":"18.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-integration-bus","product_name":"retail_integration_bus","version_start":"15.0","version_start_inclusive":true,"version_end":"15.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_integration_bus:15.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-integration-bus","product_name":"retail_integration_bus","version_start":"16.0","version_start_inclusive":true,"version_end":"16.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_integration_bus:16.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-order-broker","product_name":"retail_order_broker","version_start":"18.0","version_start_inclusive":true,"version_end":"18.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_order_broker:18.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-order-broker","product_name":"retail_order_broker","version_start":"19.0","version_start_inclusive":true,"version_end":"19.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_order_broker:19.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-order-broker","product_name":"retail_order_broker","version_start":"19.1","version_start_inclusive":true,"version_end":"19.1","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_order_broker:19.1:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-order-broker","product_name":"retail_order_broker","version_start":"16.0","version_start_inclusive":true,"version_end":"16.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-order-broker","product_name":"retail_order_broker","version_start":"15.0","version_start_inclusive":true,"version_end":"15.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-price-management","product_name":"retail_price_management","version_start":"14.0.3","version_start_inclusive":true,"version_end":"14.0.3","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_price_management:14.0.3:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-price-management","product_name":"retail_price_management","version_start":"15.0.3.0","version_start_inclusive":true,"version_end":"15.0.3.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_price_management:15.0.3.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-price-management","product_name":"retail_price_management","version_start":"16.0.3.0","version_start_inclusive":true,"version_end":"16.0.3.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_price_management:16.0.3.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-price-management","product_name":"retail_price_management","version_start":"14.1.3.0","version_start_inclusive":true,"version_end":"14.1.3.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_price_management:14.1.3.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-xstore-point-of-service","product_name":"retail_xstore_point_of_service","version_start":"16.0.6","version_start_inclusive":true,"version_end":"16.0.6","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-xstore-point-of-service","product_name":"retail_xstore_point_of_service","version_start":"18.0.3","version_start_inclusive":true,"version_end":"18.0.3","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-xstore-point-of-service","product_name":"retail_xstore_point_of_service","version_start":"17.0.4","version_start_inclusive":true,"version_end":"17.0.4","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"retail-xstore-point-of-service","product_name":"retail_xstore_point_of_service","version_start":"15.0.4","version_start_inclusive":true,"version_end":"15.0.4","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.4:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"storagetek-tape-analytics-sw-tool","product_name":"storagetek_tape_analytics_sw_tool","version_start":"2.3","version_start_inclusive":true,"version_end":"2.3","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"utilities-framework","product_name":"utilities_framework","version_start":"4.3.0.1.0","version_start_inclusive":true,"version_end":"4.3.0.6.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"utilities-framework","product_name":"utilities_framework","version_start":"4.2.0.3.0","version_start_inclusive":true,"version_end":"4.2.0.3.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:utilities_framework:4.2.0.3.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"utilities-framework","product_name":"utilities_framework","version_start":"4.2.0.2.0","version_start_inclusive":true,"version_end":"4.2.0.2.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:utilities_framework:4.2.0.2.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"utilities-framework","product_name":"utilities_framework","version_start":"2.2.0.0.0","version_start_inclusive":true,"version_end":"2.2.0.0.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:utilities_framework:2.2.0.0.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"utilities-framework","product_name":"utilities_framework","version_start":"4.4.0.2.0","version_start_inclusive":true,"version_end":"4.4.0.2.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"utilities-framework","product_name":"utilities_framework","version_start":"4.4.0.0.0","version_start_inclusive":true,"version_end":"4.4.0.0.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"webcenter-portal","product_name":"webcenter_portal","version_start":"12.2.1.3.0","version_start_inclusive":true,"version_end":"12.2.1.3.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"webcenter-portal","product_name":"webcenter_portal","version_start":"11.1.1.9.0","version_start_inclusive":true,"version_end":"11.1.1.9.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"webcenter-portal","product_name":"webcenter_portal","version_start":"12.2.1.4.0","version_start_inclusive":true,"version_end":"12.2.1.4.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*"}],"exploit_refs":[],"news":[],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00061.html","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html","source_type":"MISC","tags":[]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1694235","source_type":"MISC","tags":[]},{"url":"https://github.com/dom4j/dom4j/releases/tag/version-2.1.3","source_type":"PATCH","tags":["patch"]},{"url":"https://github.com/dom4j/dom4j/commit/a8228522a99a02146106672a34c104adbda5c658","source_type":"PATCH","tags":["patch"]},{"url":"https://security.netapp.com/advisory/ntap-20200518-0002/","source_type":"MISC","tags":[]},{"url":"https://usn.ubuntu.com/4575-1/","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://github.com/dom4j/dom4j/issues/87","source_type":"MISC","tags":[]},{"url":"https://github.com/dom4j/dom4j/commits/version-2.0.3","source_type":"MISC","tags":["patch"]},{"url":"https://lists.apache.org/thread.html/r51f3f9801058e47153c0ad9bc6209d57a592fc0e7aefd787760911b8%40%3Cdev.velocity.apache.org%3E","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://lists.apache.org/thread.html/r91c64cd51e68e97d524395474eaa25362d564572276b9917fcbf5c32%40%3Cdev.velocity.apache.org%3E","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/rb1b990d7920ae0d50da5109b73b92bab736d46c9788dd4b135cb1a51%40%3Cnotifications.freemarker.apache.org%3E","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","source_type":"VENDOR_ADVISORY","tags":["advisory"]}],"timeline":[{"type":"published","at":"2020-05-01T18:55:25Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-08-25T19:35:50.379874Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-08-25T19:35:50.379874Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-08-25T19:35:50.379874Z","label":"CVSS score revised","source":"nvd"}]}