Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:healthcare_master_person_index:4.0.2.5:*:*:*:*:*:*:*

part: a version: 4.0.2.5 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductHealthcare Master Person Index (ee5ccfb2-ac4b-5981-ae74-e3d1e3050efa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-5421 vulnerable 2026-06-08 05:26:42.847852 RFD Protection Bypass via jsessionid
HIGH (8.7)
In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.
Published: 2020-09-19T03:45:13.127Z
Updated: 2024-09-17T03:58:43.873Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.