CVE-2020-13936

Aliases:GHSA-59j4-wjwp-mw9m
Advisory lineage Upstream: 0 Downstream: 18
Modified
Published: 10 Mar 2021, 08:00
Last modified:13 Feb 2025, 16:27

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9 HIGH
v2.0 (nvd)
EPSS Score
16.76% MEDIUM
17% probability +0.36%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

10 Mar 2021, 08:00
Published
Vulnerability first disclosed
13 Feb 2025, 16:27
Last Modified
Vulnerability information updated

Description

An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity templates running Apache Velocity Engine versions up to 2.2.

CVSS Metrics

  • v3.1•HIGH•Score: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 9AV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 16.76%• Percentile: 95%

Affected Systems

  • apache software foundation•apache velocity engine

    ≥ Apache Velocity Engine, ≤ 2.2

  • apache•velocity_engine

    < 2.3

  • apache•wss4j

    2.3.1

  • debian•debian_linux

    9.0

  • org.apache.velocity•velocity

    ≤ 1.7

  • org.apache.velocity•velocity-engine-parent

    < 2.3

  • oracle•banking_deposits_and_lines_of_credit_servicing

    2.12.0

  • oracle•banking_enterprise_default_management

    ≥ 2.3.0, ≤ 2.4.1 | 2.6.2 | 2.7.1 | 2.10.0 | 2.12.0

  • oracle•banking_loans_servicing

    2.12.0

  • oracle•banking_party_management

    2.7.0

  • oracle•banking_platform

    ≥ 2.3.0, ≤ 2.4.1 | 2.6.2 | 2.7.1

  • oracle•communications_cloud_native_core_policy

    1.14.0

  • oracle•communications_network_integrity

    7.3.6

  • oracle•hospitality_token_proxy_service

    19.2

  • oracle•retail_integration_bus

    19.0.1

  • oracle•retail_order_broker

    16.0

  • oracle•retail_service_backbone

    19.0.1

  • oracle•retail_xstore_office_cloud_service

    16.0.6 | 17.0.4 | 18.0.3 | 19.0.2 | 20.0.1

  • oracle•utilities_testing_accelerator

    6.0.0.1.1 | 6.0.0.2.2 | 6.0.0.3.1

References (43)