CVE:CVE-2020-13936
CNNVD:CNNVD-202103-758
Iteris Apache Velocity是美国 （Iteris）公司的一个应用软件。用于创建和维护与Apache Velocity Engine相关的开源软件功能。
Apache Velocity Engine versions up to 2.2 存在安全漏洞，攻击者可利用该漏洞执行任意Java代码或运行任意系统命令。
solution:Upgrade apache velocity_engine to a higher version than 2.3,and avoid the version (,2.3); Upgrade apache wss4j to a higher version than 2.3.1,and avoid the version 2.3.1; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle banking_deposits_and_lines_of_credit_servicing to a higher version than 2.12.0,and avoid the version 2.12.0; Upgrade oracle banking_enterprise_default_management to a higher version than 2.4.1,2.6.2,2.7.1,2.10.0,2.12.0,and avoid the version [2.3.0,2.4.1],2.6.2,2.7.1,2.10.0,2.12.0; Upgrade oracle banking_loans_servicing to a higher version than 2.12.0,and avoid the version 2.12.0; Upgrade oracle banking_party_management to a higher version than 2.7.0,and avoid the version 2.7.0; Upgrade oracle banking_platform to a higher version than 2.4.1,2.6.2,2.7.1,and avoid the version [2.3.0,2.4.1],2.6.2,2.7.1; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_network_integrity to a higher version than 7.3.6,and avoid the version 7.3.6; Upgrade oracle hospitality_token_proxy_service to a higher version than 19.2,and avoid the version 19.2; Upgrade oracle retail_integration_bus to a higher version than 19.0.1,and avoid the version 19.0.1; Upgrade oracle retail_order_broker to a higher version than 16.0,and avoid the version 16.0; Upgrade oracle retail_service_backbone to a higher version than 19.0.1,and avoid the version 19.0.1; Upgrade oracle retail_xstore_office_cloud_service to a higher version than 16.0.6,17.0.4,18.0.3,19.0.2,20.0.1,and avoid the version 16.0.6,17.0.4,18.0.3,19.0.2,20.0.1; Upgrade oracle utilities_testing_accelerator to a higher version than 6.0.0.1.1,6.0.0.2.2,6.0.0.3.1,and avoid the version 6.0.0.1.1,6.0.0.2.2,6.0.0.3.1