CVE-2020-11987
high · 8.2Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
8.2
CVSS
13.3%
EPSS (exploit prob.)
96th
EPSS percentile
2021-02-24
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Weaknesses
CWE-20CWE-918
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| apache | batik | <= 1.13 |
| fedoraproject | fedora | 33 |
| fedoraproject | fedora | 34 |
| oracle | agile_engineering_data_management | 6.2.1.0 |
| oracle | banking_apis | 18.3 |
| oracle | banking_apis | 19.1 |
| oracle | banking_apis | 19.2 |
| oracle | banking_apis | 20.1 |
| oracle | banking_apis | 21.1 |
| oracle | banking_digital_experience | 18.3 |
| oracle | banking_digital_experience | 19.1 |
| oracle | banking_digital_experience | 19.2 |
| oracle | banking_digital_experience | 20.1 |
| oracle | banking_digital_experience | 21.1 |
| oracle | communications_application_session_controller | 3.9m0p3 |
| oracle | communications_metasolv_solution | 6.3.0 |
| oracle | communications_metasolv_solution | 6.3.1 |
| oracle | communications_offline_mediation_controller | 12.0.0.3.0 |
| oracle | enterprise_repository | 11.1.1.7.0 |
| oracle | flexcube_universal_banking | >= 14.1.0, <= 14.4.0 |
| oracle | fusion_middleware_mapviewer | 12.2.1.4.0 |
| oracle | instantis_enterprisetrack | 17.1 |
| oracle | instantis_enterprisetrack | 17.2 |
| oracle | instantis_enterprisetrack | 17.3 |
| oracle | insurance_policy_administration | >= 11.0, <= 11.3.1 |
| oracle | product_lifecycle_analytics | 3.6.1 |
| oracle | retail_back_office | 14.1 |
| oracle | retail_central_office | 14.1 |
| oracle | retail_order_broker | 15.0 |
| oracle | retail_order_broker | 16.0 |
| oracle | retail_order_management_system_cloud_service | 19.5 |
| oracle | retail_point-of-service | 14.1 |
| oracle | retail_returns_management | 14.1 |
| oracle | weblogic_server | 12.2.1.3.0 |
| oracle | weblogic_server | 12.2.1.4.0 |
| oracle | weblogic_server | 14.1.1.0.0 |
| debian | debian_linux | 10.0 |
Check a specific version with /api/v1/cve/match.
References
- https://lists.apache.org/thread.html/r2877ae10e8be56a3c52d03e373512ddd32f16b863f24c2e22f5a5ba2%40%3Cdev.poi.apache.org%3E
- https://lists.apache.org/thread.html/r588d05a0790b40a0eb81088252e1e8c1efb99706631421f17038eb05%40%3Cdev.poi.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JEDID4DAVPECE6O4QQCSIS75BLLBUUAM/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W7EAYO5XIHD6OIEA3HPK64UDDBSLNAC5/
- https://security.gentoo.org/glsa/202401-11
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://xmlgraphics.apache.org/security.html
- https://lists.apache.org/thread.html/r2877ae10e8be56a3c52d03e373512ddd32f16b863f24c2e22f5a5ba2%40%3Cdev.poi.apache.org%3E
- https://lists.apache.org/thread.html/r588d05a0790b40a0eb81088252e1e8c1efb99706631421f17038eb05%40%3Cdev.poi.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html
- https://lists.debian.org/debian-lts-announce/2025/07/msg00006.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JEDID4DAVPECE6O4QQCSIS75BLLBUUAM/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W7EAYO5XIHD6OIEA3HPK64UDDBSLNAC5/
- https://security.gentoo.org/glsa/202401-11
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://xmlgraphics.apache.org/security.html
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2020-11987