CVE-2020-9488

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1

• apache log4j (>= 2.0 < 2.3.2) • apache log4j (>= 2.4 < 2.12.3) • apache log4j (>= 2.13.0 < 2.13.2) • oracle communications application session controller 3.9m0p1 • oracle communications billing and revenue management 7.5.0.23.0 • oracle communications billing and revenue management 12.0.0.3.0 • oracle communications eagle ftp table base retrieval 4.5 • oracle communications offline mediation controller 12.0.0.3.0 • oracle communications services gatekeeper 7.0 • oracle communications unified inventory management 7.3.0 • oracle communications unified inventory management 7.4.0 • oracle data integrator 12.2.1.3.0 • oracle data integrator 12.2.1.4.0 • oracle enterprise manager for peoplesoft 13.4.1.1 • oracle financial services analytical applications infrastructure (>= 8.0.6.0.0 <= 8.1.0.0.0) • oracle financial services institutional performance analytics 8.0.6 • oracle financial services institutional performance analytics 8.1.0 • oracle financial services institutional performance analytics 8.7.0 • oracle financial services market risk measurement and management 8.0.6 • oracle financial services market risk measurement and management 8.0.8 • oracle financial services market risk measurement and management 8.1.0 • oracle financial services price creation and discovery 8.0.6 • oracle financial services price creation and discovery 8.0.7 • oracle financial services retail customer analytics 8.0.6 • oracle flexcube core banking (>= 11.5.0 <= 11.7.0) • oracle flexcube core banking 5.2.0 • oracle flexcube private banking 12.0.0 • oracle flexcube private banking 12.1.0 • oracle health sciences information manager 3.0.1 • oracle insurance insbridge rating and underwriting (>= 5.0.0.0 <= 5.6.0.0) • oracle insurance insbridge rating and underwriting 5.6.1.0 • oracle insurance policy administration j2ee 10.2.0.37 • oracle insurance policy administration j2ee 10.2.4.12 • oracle insurance policy administration j2ee 11.0.2.25 • oracle insurance policy administration j2ee 11.1.0.15 • oracle insurance policy administration j2ee 11.2.0.26 • oracle insurance rules palette 10.2.0.37 • oracle insurance rules palette 10.2.4.12 • oracle insurance rules palette 11.0.2.25 • oracle insurance rules palette 11.1.0.15 • oracle insurance rules palette 11.2.0.26 • oracle jd edwards world security a9.4 • oracle oracle goldengate application adapters 19.1.0.0.0 • oracle peoplesoft enterprise peopletools 8.56 • oracle peoplesoft enterprise peopletools 8.57 • oracle peoplesoft enterprise peopletools 8.58 • oracle policy automation (>= 12.2.0 <= 12.2.20) • oracle policy automation connector for siebel 10.4.6 • oracle policy automation for mobile devices (>= 12.2.0 <= 12.2.20) • oracle primavera unifier 18.8 • oracle primavera unifier 19.12 • oracle retail advanced inventory planning 14.1 • oracle retail assortment planning 15.0.3.0 • oracle retail assortment planning 16.0.3.0 • oracle retail bulk data integration 15.0.3.0 • oracle retail bulk data integration 16.0.3.0 • oracle retail customer management and segmentation foundation 16.0 • oracle retail customer management and segmentation foundation 17.0 • oracle retail customer management and segmentation foundation 18.0 • oracle retail customer management and segmentation foundation 19.0 … and 41 more