CVE-2020-5398
published 2020-01-17CVE-2020-5398: In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a…
PriorityP262high7.5CVSS 3.1
AVNACHPRNUIRSUCHIHAH
EPSS
88.77%
99.8th percentile
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
Affected
65 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libspring-java | — | — |
| oracle | application_testing_suite | — | — |
| oracle | communications_billing_and_revenue_management_elastic_charging_engine | — | — |
| oracle | communications_billing_and_revenue_management_elastic_charging_engine | — | — |
| oracle | communications_cloud_native_core_policy | — | — |
| oracle | communications_diameter_signaling_router | 8.0.0 – 8.2.2 | — |
| oracle | communications_element_manager | — | — |
| oracle | communications_element_manager | — | — |
| oracle | communications_element_manager | — | — |
| oracle | communications_policy_management | — | — |
| oracle | communications_session_report_manager | — | — |
| oracle | communications_session_report_manager | — | — |
| oracle | communications_session_report_manager | — | — |
| oracle | communications_session_route_manager | — | — |
| oracle | communications_session_route_manager | — | — |
| oracle | communications_session_route_manager | — | — |
| oracle | enterprise_manager_base_platform | — | — |
| oracle | financial_services_regulatory_reporting_with_agilereporter | — | — |
| oracle | flexcube_private_banking | — | — |
| oracle | flexcube_private_banking | — | — |
| oracle | healthcare_master_person_index | — | — |
| oracle | insurance_calculation_engine | 11.0.0 – 11.3.1 | — |
| oracle | insurance_policy_administration_j2ee | — | — |
| oracle | insurance_policy_administration_j2ee | — | — |
| oracle | insurance_policy_administration_j2ee | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Look for HTTP responses where the Content-Disposition header's filename attribute is derived from user-supplied input, which is the trigger condition for the RFD attack vector. ↗
- ·Vulnerable Spring Framework versions are 5.2.x prior to 5.2.3, 5.1.x prior to 5.1.13, and 5.0.x prior to 5.0.16. Ensure deployed versions are patched beyond these thresholds. ↗
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv3.08.0HIGHCVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
nvdv2.07.6HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C
osv7.5HIGH
vendor_debian7.5LOW
vendor_oracle7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Oracle Healthcare Master Person Index 4.0.2 Master Data Management code download
vuldb·2026-10-11·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Healthcare Master Person Index 4.0.2 Master Data Management code download
A vulnerability, which was classified as critical, has been found in Oracle Healthcare Master Person Index 4.0.2. This issue affects some unknown processing of the component Master Data Management. The manipulation leads to download of code without integrity check.
This vulnerability is uniquely identified as CVE-2020-5398. The attack is possible to be carried out remotely. No exploit exists.
It is advisable to upgrade the affected component.
VulDB
Oracle Insurance Policy Administration J2EE up to 11.2.0 Architecture code download
vuldb·2026-10-11·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Insurance Policy Administration J2EE up to 11.2.0 Architecture code download
A vulnerability identified as critical has been detected in Oracle Insurance Policy Administration J2EE 10.2.0/10.2.4/11.0.2/11.1.0/11.2.0. Affected by this issue is some unknown functionality of the component Architecture. This manipulation causes download of code without integrity check.
This vulnerability is registered as CVE-2020-5398. Remote exploitation of the attack is possible. No exploit is available.
You should upgrade the affected component.
VulDB
Oracle WebLogic Server 12.2.1.3.0/12.2.1.4.0 Sample apps code download
vuldb·2026-10-11·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle WebLogic Server 12.2.1.3.0/12.2.1.4.0 Sample apps code download
A vulnerability described as critical has been identified in Oracle WebLogic Server 12.2.1.3.0/12.2.1.4.0. The affected element is an unknown function of the component Sample apps. Executing a manipulation can lead to download of code without integrity check.
This vulnerability is handled as CVE-2020-5398. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is recommended.
VulDB
Oracle Communications BRM - Elastic Charging Engine 11.3/12.0 Orchestration code download
vuldb·2026-10-11·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Communications BRM - Elastic Charging Engine 11.3/12.0 Orchestration code download
A vulnerability labeled as critical has been found in Oracle Communications BRM - Elastic Charging Engine 11.3/12.0. Affected by this issue is some unknown functionality of the component Orchestration. Such manipulation leads to download of code without integrity check.
This vulnerability is documented as CVE-2020-5398. The attack can be executed remotely. There is not any exploit available.
The affected component should be upgraded.
VulDB
Oracle Communications Element Manager 8.1.1/8.2.0/8.2.1 Core code download
vuldb·2026-10-11·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Communications Element Manager 8.1.1/8.2.0/8.2.1 Core code download
A vulnerability described as critical has been identified in Oracle Communications Element Manager 8.1.1/8.2.0/8.2.1. This vulnerability affects unknown code of the component Core. Executing a manipulation can lead to download of code without integrity check.
This vulnerability appears as CVE-2020-5398. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is recommended.
VulDB
Oracle Insurance Rules Palette up to 11.2.0 Architecture code download
vuldb·2026-10-11·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Insurance Rules Palette up to 11.2.0 Architecture code download
A vulnerability labeled as critical has been found in Oracle Insurance Rules Palette 10.2.0/10.2.4/11.0.2/11.1.0/11.2.0. This affects an unknown part of the component Architecture. Such manipulation leads to download of code without integrity check.
This vulnerability is documented as CVE-2020-5398. The attack can be executed remotely. There is not any exploit available.
The affected component should be upgraded.
VulDB
Oracle MySQL Enterprise Monitor up to 4.0.12/8.0.20 General code download
vuldb·2026-10-11·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle MySQL Enterprise Monitor up to 4.0.12/8.0.20 General code download
A vulnerability was found in Oracle MySQL Enterprise Monitor up to 4.0.12/8.0.20. It has been declared as critical. This issue affects some unknown processing of the component General. Such manipulation leads to download of code without integrity check.
This vulnerability is referenced as CVE-2020-5398. It is possible to launch the attack remotely. No exploit is available.
It is recommended to upgrade the affected component.
VulDB
Oracle Retail Assortment Planning 15.0/16.0 Application Core code download
vuldb·2026-10-11·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Retail Assortment Planning 15.0/16.0 Application Core code download
A vulnerability labeled as critical has been found in Oracle Retail Assortment Planning 15.0/16.0. Affected by this issue is some unknown functionality of the component Application Core. Executing a manipulation can lead to download of code without integrity check.
The identification of this vulnerability is CVE-2020-5398. The attack may be launched remotely. There is no exploit available.
The affected component should be upgraded.
VulDB
Oracle Retail Order Broker 15.0/16.0 System Administration code download
vuldb·2026-10-11·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Retail Order Broker 15.0/16.0 System Administration code download
A vulnerability marked as critical has been reported in Oracle Retail Order Broker 15.0/16.0. The impacted element is an unknown function of the component System Administration. Performing a manipulation results in download of code without integrity check.
This vulnerability was named CVE-2020-5398. The attack may be initiated remotely. There is no available exploit.
It is suggested to upgrade the affected component.
VulDB
Spring Framework up to 5.0.15/5.1.12/5.2.2 Header Content-Disposition Reflected cross site scripting
vuldb·2026-10-11·CVSS 7.5
CVE-2020-5398 [HIGH] Spring Framework up to 5.0.15/5.1.12/5.2.2 Header Content-Disposition Reflected cross site scripting
A vulnerability, which was classified as problematic, was found in Spring Framework up to 5.0.15/5.1.12/5.2.2. Impacted is an unknown function of the component Header Handler. The manipulation of the argument Content-Disposition results in cross site scripting (Reflected).
This vulnerability was named CVE-2020-5398. The attack may be performed from remote. There is no available exploit.
You should upgrade the affected component.
VulDB
Oracle Communications Session Report Manager 8.1.1/8.2.0/8.2.1 Core code download
vuldb·2026-10-11·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Communications Session Report Manager 8.1.1/8.2.0/8.2.1 Core code download
A vulnerability, which was classified as critical, was found in Oracle Communications Session Report Manager 8.1.1/8.2.0/8.2.1. The impacted element is an unknown function of the component Core. Such manipulation leads to download of code without integrity check.
This vulnerability is uniquely identified as CVE-2020-5398. The attack can be launched remotely. No exploit exists.
You should upgrade the affected component.
VulDB
Oracle Communications Session Route Manager 8.1.1/8.2.0/8.2.1 Core code download
vuldb·2026-10-11·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Communications Session Route Manager 8.1.1/8.2.0/8.2.1 Core code download
A vulnerability has been found in Oracle Communications Session Route Manager 8.1.1/8.2.0/8.2.1 and classified as critical. This affects an unknown function of the component Core. Performing a manipulation results in download of code without integrity check.
This vulnerability was named CVE-2020-5398. The attack may be initiated remotely. There is no available exploit.
The affected component should be upgraded.
GHSA
RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application
ghsa·2020-01-21
CVE-2020-5398 [HIGH] CWE-494 RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application
RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
OSV
RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application
osv·2020-01-21
CVE-2020-5398 [HIGH] RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application
RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
OSV
CVE-2020-5398: In Spring Framework, versions 5
osv·2020-01-17·CVSS 7.5
CVE-2020-5398 [HIGH] CVE-2020-5398: In Spring Framework, versions 5
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
Oracle
Oracle Oracle Communications Risk Matrix: VNF Manager (Spring Framework) — CVE-2020-5398
vendor_oracle·2021-10-15·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Oracle Communications Risk Matrix: VNF Manager (Spring Framework) — CVE-2020-5398
Oracle Oracle Communications Risk Matrix: VNF Manager (Spring Framework) vulnerability
CVE: CVE-2020-5398
CVSS: 7.5
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuoct2021 (OCT 2021)
Oracle
Oracle Oracle Communications Risk Matrix: Configuration (Spring Framework) — CVE-2020-5398
vendor_oracle·2021-07-15·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Oracle Communications Risk Matrix: Configuration (Spring Framework) — CVE-2020-5398
Oracle Oracle Communications Risk Matrix: Configuration (Spring Framework) vulnerability
CVE: CVE-2020-5398
CVSS: 7.5
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujul2021 (JUL 2021)
Oracle
Oracle Oracle Siebel CRM Risk Matrix: Siebel Approval Manager (Spring Framework) — CVE-2020-5398
vendor_oracle·2021-04-15·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Oracle Siebel CRM Risk Matrix: Siebel Approval Manager (Spring Framework) — CVE-2020-5398
Oracle Oracle Siebel CRM Risk Matrix: Siebel Approval Manager (Spring Framework) vulnerability
CVE: CVE-2020-5398
CVSS: 7.5
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuapr2021 (APR 2021)
Oracle
Oracle Oracle Retail Applications Risk Matrix: BDI Job Scheduler (Spring Framework) — CVE-2020-5398
vendor_oracle·2021-01-15·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Oracle Retail Applications Risk Matrix: BDI Job Scheduler (Spring Framework) — CVE-2020-5398
Oracle Oracle Retail Applications Risk Matrix: BDI Job Scheduler (Spring Framework) vulnerability
CVE: CVE-2020-5398
CVSS: 7.5
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujan2021 (JAN 2021)
Oracle
Oracle Oracle Communications Risk Matrix: IDIH (Spring Framework) — CVE-2020-5398
vendor_oracle·2020-10-15·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Oracle Communications Risk Matrix: IDIH (Spring Framework) — CVE-2020-5398
Oracle Oracle Communications Risk Matrix: IDIH (Spring Framework) vulnerability
CVE: CVE-2020-5398
CVSS: 7.5
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuoct2020 (OCT 2020)
Oracle
Oracle Oracle Communications Applications Risk Matrix: Orchestration (Spring Framework) — CVE-2020-5398
vendor_oracle·2020-07-15·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Oracle Communications Applications Risk Matrix: Orchestration (Spring Framework) — CVE-2020-5398
Oracle Oracle Communications Applications Risk Matrix: Orchestration (Spring Framework) vulnerability
CVE: CVE-2020-5398
CVSS: 7.5
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujul2020 (JUL 2020)
Oracle
Oracle Oracle Retail Applications Risk Matrix: System Administration (Spring Framework) — CVE-2020-5398
vendor_oracle·2020-04-15·CVSS 7.5
CVE-2020-5398 [HIGH] Oracle Oracle Retail Applications Risk Matrix: System Administration (Spring Framework) — CVE-2020-5398
Oracle Oracle Retail Applications Risk Matrix: System Administration (Spring Framework) vulnerability
CVE: CVE-2020-5398
CVSS: 7.5
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuapr2020 (APR 2020)
Red Hat
springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application
vendor_redhat·2020-01-16·CVSS 7.5
CVE-2020-5398 [HIGH] CWE-79 springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application
springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
A flaw was found in springframework in versions prior to 5.0.16, 5.1.13, and 5.2.3. A reflected file download (RFD) attack is possible when a "Content-Disposition" header is set in response to where the filename attribute is derived from user supplied input. The highest threat from this vulnerability is to data confidentiality and integrity as well
Debian
CVE-2020-5398: libspring-java - In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1....
vendor_debian·2020·CVSS 7.5
CVE-2020-5398 [HIGH] CVE-2020-5398: libspring-java - In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1....
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
No public exploits indexed.
Bugzilla
Content-Disposition filename truncation leads to Reflected File Download
bugzilla·2022-08-11·CVSS 9.6
[CRITICAL] Content-Disposition filename truncation leads to Reflected File Download
Content-Disposition filename truncation leads to Reflected File Download
User-Agent:
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:103.0) Gecko/20100101 Firefox/103.0
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:103.0) Gecko/20100101 Firefox/103.0
When handling filename directive in the Content-Disposition header, the filename would be truncated if the token contains a NULL character and only the first part is kept: `filename.exe.txt` -> `filename.exe`
This behavior makes Firefox users vulnerable to reflected file download (RFD). For instance, CVE-2022-36359[1] in Django that has been patched[2] is still exploitable on Firefox because the filename truncation provides a trivial way to manipulate and bypass e
Bugzilla
CVE-2020-5398 springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application
bugzilla·2020-02-06·CVSS 7.5
CVE-2020-5398 [HIGH] CVE-2020-5398 springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application
CVE-2020-5398 springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
Reference:
https://pivotal.io/security/cve-2020-5398
Discussion:
Created springframework tracking bugs for this issue:
Affects: fedora-all [bug 1799477]
---
External References:
https://pivotal.io/security/cve-2020-5398
---
This vulnerability is out of security support scope for the following products:
* Red Hat JBoss Data Virt
Bugzilla
CVE-2020-5398 springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application [fedora-all]
bugzilla·2020-02-06·CVSS 7.5
CVE-2020-5398 [HIGH] CVE-2020-5398 springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application [fedora-all]
CVE-2020-5398 springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and t
https://lists.apache.org/thread.html/r028977b9b9d44a89823639aa3296fb0f0cfdd76b4450df89d3c4fbbf%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r0f2d0ae1bad2edb3d4a863d77f3097b5e88cfbdae7b809f4f42d6aad%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r0f3530f7cb510036e497532ffc4e0bd0b882940448cf4e233994b08b%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r1accbd4f31ad2f40e1661d70a4510a584eb3efd1e32e8660ccf46676%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r1bc5d673c01cfbb8e4a91914e9748ead3e5f56b61bca54d314c0419b%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r1c679c43fa4f7846d748a937955c7921436d1b315445978254442163%40%3Ccommits.ambari.apache.org%3Ehttps://lists.apache.org/thread.html/r1eccdbd7986618a7319ee7a533bd9d9bf6e8678e59dd4cca9b5b2d7a%40%3Cissues.ambari.apache.org%3Ehttps://lists.apache.org/thread.html/r27552d2fa10d96f2810c50d16ad1fd1899e37796c81a0c5e7585a02d%40%3Cdev.rocketmq.apache.org%3Ehttps://lists.apache.org/thread.html/r2dfd5b331b46d3f90c4dd63a060e9f04300468293874bd7e41af7163%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r3765353ff434fd00d8fa5a44734b3625a06eeb2a3fb468da7dfae134%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r4639e821ef9ca6ca10887988f410a60261400a7766560e7a97a22efc%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r4b1886e82cc98ef38f582fef7d4ea722e3fcf46637cd4674926ba682%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r5c95eff679dfc642e9e4ab5ac6d202248a59cb1e9457cfbe8b729ac5%40%3Cissues.ambari.apache.org%3Ehttps://lists.apache.org/thread.html/r645408661a8df9158f49e337072df39838fa76da629a7e25a20928a6%40%3Cdev.rocketmq.apache.org%3Ehttps://lists.apache.org/thread.html/r6dac0e365d1b2df9a7ffca12b4195181ec14ff0abdf59e1fdb088ce5%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r712a6fce928e24e7b6ec30994a7e115a70f1f6e4cf2c2fbf0347ce46%40%3Ccommits.servicecomb.apache.org%3Ehttps://lists.apache.org/thread.html/r7361bfe84bde9d233f9800c3a96673e7bd81207549ced0236f07a29d%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r74f81f93a9b69140fe41e236afa7cbe8dfa75692e7ab31a468fddaa0%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r7d5e518088e2e778928b02bcd3be3b948b59acefe2f0ebb57ec2ebb0%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r8736185eb921022225a83e56d7285a217fd83f5524bd64a6ca3bf5cc%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r881fb5a95ab251106fed38f836257276feb026bfe01290e72ff91c2a%40%3Ccommits.servicecomb.apache.org%3Ehttps://lists.apache.org/thread.html/r8b496b1743d128e6861ee0ed3c3c48cc56c505b38f84fa5baf7ae33a%40%3Cdev.ambari.apache.org%3Ehttps://lists.apache.org/thread.html/r8cc37a60a5056351377ee5f1258f2a4fdd39822a257838ba6bcc1e88%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r9f13cccb214495e14648d2c9b8f2c6072fd5219e74502dd35ede81e1%40%3Cdev.ambari.apache.org%3Ehttps://lists.apache.org/thread.html/r9fb1ee08cf337d16c3364feb0f35a072438c1a956afd7b77859aa090%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/ra996b56e1f5ab2fed235a8b91fa0cc3cf34c2e9fee290b7fa4380a0d%40%3Ccommits.servicecomb.apache.org%3Ehttps://lists.apache.org/thread.html/rab0de39839b4c208dcd73f01e12899dc453361935a816a784548e048%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/rb4d1fc078f086ec2e98b2693e8b358e58a6a4ef903ceed93a1ee2b18%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/rc05acaacad089613e9642f939b3a44f7199b5537493945c3e045287f%40%3Cdev.geode.apache.org%3Ehttps://lists.apache.org/thread.html/rc9c7f96f08c8554225dba9050ea5e64bebc129d0d836303143fe3160%40%3Cdev.rocketmq.apache.org%3Ehttps://lists.apache.org/thread.html/rdcaadaa9a68b31b7d093d76eacfaacf6c7a819f976b595c75ad2d4dc%40%3Cdev.geode.apache.org%3Ehttps://lists.apache.org/thread.html/rded5291e25a4c4085a6d43cf262e479140198bf4eabb84986e0a1ef3%40%3Cdev.rocketmq.apache.org%3Ehttps://lists.apache.org/thread.html/reaa8a6674baf2724b1b88a621b0d72d9f7a6f5577c88759842c16eb6%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/rf8dc72b974ee74f17bce661ea7d124e733a1f4c4f236354ac0cf48e8%40%3Ccommits.camel.apache.org%3Ehttps://pivotal.io/security/cve-2020-5398https://security.netapp.com/advisory/ntap-20210917-0006/https://www.oracle.com//security-alerts/cpujul2021.htmlhttps://www.oracle.com/security-alerts/cpuApr2021.htmlhttps://www.oracle.com/security-alerts/cpuapr2020.htmlhttps://www.oracle.com/security-alerts/cpujan2021.htmlhttps://www.oracle.com/security-alerts/cpujul2020.htmlhttps://www.oracle.com/security-alerts/cpujul2022.htmlhttps://www.oracle.com/security-alerts/cpuoct2020.htmlhttps://www.oracle.com/security-alerts/cpuoct2021.htmlhttps://lists.apache.org/thread.html/r028977b9b9d44a89823639aa3296fb0f0cfdd76b4450df89d3c4fbbf%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r0f2d0ae1bad2edb3d4a863d77f3097b5e88cfbdae7b809f4f42d6aad%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r0f3530f7cb510036e497532ffc4e0bd0b882940448cf4e233994b08b%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r1accbd4f31ad2f40e1661d70a4510a584eb3efd1e32e8660ccf46676%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r1bc5d673c01cfbb8e4a91914e9748ead3e5f56b61bca54d314c0419b%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r1c679c43fa4f7846d748a937955c7921436d1b315445978254442163%40%3Ccommits.ambari.apache.org%3Ehttps://lists.apache.org/thread.html/r1eccdbd7986618a7319ee7a533bd9d9bf6e8678e59dd4cca9b5b2d7a%40%3Cissues.ambari.apache.org%3Ehttps://lists.apache.org/thread.html/r27552d2fa10d96f2810c50d16ad1fd1899e37796c81a0c5e7585a02d%40%3Cdev.rocketmq.apache.org%3Ehttps://lists.apache.org/thread.html/r2dfd5b331b46d3f90c4dd63a060e9f04300468293874bd7e41af7163%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r3765353ff434fd00d8fa5a44734b3625a06eeb2a3fb468da7dfae134%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r4639e821ef9ca6ca10887988f410a60261400a7766560e7a97a22efc%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r4b1886e82cc98ef38f582fef7d4ea722e3fcf46637cd4674926ba682%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r5c95eff679dfc642e9e4ab5ac6d202248a59cb1e9457cfbe8b729ac5%40%3Cissues.ambari.apache.org%3Ehttps://lists.apache.org/thread.html/r645408661a8df9158f49e337072df39838fa76da629a7e25a20928a6%40%3Cdev.rocketmq.apache.org%3Ehttps://lists.apache.org/thread.html/r6dac0e365d1b2df9a7ffca12b4195181ec14ff0abdf59e1fdb088ce5%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r712a6fce928e24e7b6ec30994a7e115a70f1f6e4cf2c2fbf0347ce46%40%3Ccommits.servicecomb.apache.org%3Ehttps://lists.apache.org/thread.html/r7361bfe84bde9d233f9800c3a96673e7bd81207549ced0236f07a29d%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r74f81f93a9b69140fe41e236afa7cbe8dfa75692e7ab31a468fddaa0%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r7d5e518088e2e778928b02bcd3be3b948b59acefe2f0ebb57ec2ebb0%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r8736185eb921022225a83e56d7285a217fd83f5524bd64a6ca3bf5cc%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r881fb5a95ab251106fed38f836257276feb026bfe01290e72ff91c2a%40%3Ccommits.servicecomb.apache.org%3Ehttps://lists.apache.org/thread.html/r8b496b1743d128e6861ee0ed3c3c48cc56c505b38f84fa5baf7ae33a%40%3Cdev.ambari.apache.org%3Ehttps://lists.apache.org/thread.html/r8cc37a60a5056351377ee5f1258f2a4fdd39822a257838ba6bcc1e88%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/r9f13cccb214495e14648d2c9b8f2c6072fd5219e74502dd35ede81e1%40%3Cdev.ambari.apache.org%3Ehttps://lists.apache.org/thread.html/r9fb1ee08cf337d16c3364feb0f35a072438c1a956afd7b77859aa090%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/ra996b56e1f5ab2fed235a8b91fa0cc3cf34c2e9fee290b7fa4380a0d%40%3Ccommits.servicecomb.apache.org%3Ehttps://lists.apache.org/thread.html/rab0de39839b4c208dcd73f01e12899dc453361935a816a784548e048%40%3Cissues.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/rb4d1fc078f086ec2e98b2693e8b358e58a6a4ef903ceed93a1ee2b18%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/rc05acaacad089613e9642f939b3a44f7199b5537493945c3e045287f%40%3Cdev.geode.apache.org%3Ehttps://lists.apache.org/thread.html/rc9c7f96f08c8554225dba9050ea5e64bebc129d0d836303143fe3160%40%3Cdev.rocketmq.apache.org%3Ehttps://lists.apache.org/thread.html/rdcaadaa9a68b31b7d093d76eacfaacf6c7a819f976b595c75ad2d4dc%40%3Cdev.geode.apache.org%3Ehttps://lists.apache.org/thread.html/rded5291e25a4c4085a6d43cf262e479140198bf4eabb84986e0a1ef3%40%3Cdev.rocketmq.apache.org%3Ehttps://lists.apache.org/thread.html/reaa8a6674baf2724b1b88a621b0d72d9f7a6f5577c88759842c16eb6%40%3Ccommits.karaf.apache.org%3Ehttps://lists.apache.org/thread.html/rf8dc72b974ee74f17bce661ea7d124e733a1f4c4f236354ac0cf48e8%40%3Ccommits.camel.apache.org%3Ehttps://pivotal.io/security/cve-2020-5398https://security.netapp.com/advisory/ntap-20210917-0006/https://www.oracle.com//security-alerts/cpujul2021.htmlhttps://www.oracle.com/security-alerts/cpuApr2021.htmlhttps://www.oracle.com/security-alerts/cpuapr2020.htmlhttps://www.oracle.com/security-alerts/cpujan2021.htmlhttps://www.oracle.com/security-alerts/cpujul2020.htmlhttps://www.oracle.com/security-alerts/cpujul2022.htmlhttps://www.oracle.com/security-alerts/cpuoct2020.htmlhttps://www.oracle.com/security-alerts/cpuoct2021.html
2020-01-17
Published