Sign In

CVE-2020-28500

📊 5.3 MEDIUM⚡ 0.1%🎯 1 exploits
📅 Published Feb 15, 2021
📋 Status: Modified

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

🎯 Affected Products & Systems

42 product configurations affected

Filter by type:
📱
lodash / lodash
Application
Vulnerable
Version: < 4.17.21
Target SW: node.js
CPE:
cpe:2.3:a:lodash:lodash:*:*:*:*:*:node.js:*:*
📱
Vulnerable
Version: 14.2.0
CPE:
cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.3.0
CPE:
cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.5.0
CPE:
cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.2.0
CPE:
cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.3.0
CPE:
cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.3.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.5.0
CPE:
cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.2.0
CPE:
cpe:2.3:a:oracle:banking_extensibility_workbench:14.2.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.3.0
CPE:
cpe:2.3:a:oracle:banking_extensibility_workbench:14.3.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.5.0
CPE:
cpe:2.3:a:oracle:banking_extensibility_workbench:14.5.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.2.0
CPE:
cpe:2.3:a:oracle:banking_supply_chain_finance:14.2.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.3.0
CPE:
cpe:2.3:a:oracle:banking_supply_chain_finance:14.3.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.5.0
CPE:
cpe:2.3:a:oracle:banking_supply_chain_finance:14.5.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.2.0
CPE:
cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.3.0
CPE:
cpe:2.3:a:oracle:banking_trade_finance_process_management:14.3.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.5.0
CPE:
cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 1.11.0
CPE:
cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.11.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 7.4.2
CPE:
cpe:2.3:a:oracle:communications_design_studio:7.4.2:*:*:*:*:*:*:*
📱
Vulnerable
Version: 7.0
CPE:
cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 8.4
CPE:
cpe:2.3:a:oracle:communications_session_border_controller:8.4:*:*:*:*:*:*:*
📱
Vulnerable
Version: 9.0
CPE:
cpe:2.3:a:oracle:communications_session_border_controller:9.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 3.2.0
CPE:
cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 3.3.0
CPE:
cpe:2.3:a:oracle:enterprise_communications_broker:3.3.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 8.0.8.2.0
CPE:
cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 8.0.8.3.0
CPE:
cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.3.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 2.5.2.1
CPE:
cpe:2.3:a:oracle:health_sciences_data_management_workbench:2.5.2.1:*:*:*:*:*:*:*
📱
Vulnerable
Version: 3.0.0.0
CPE:
cpe:2.3:a:oracle:health_sciences_data_management_workbench:3.0.0.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: < 9.2.6.1
CPE:
cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*
📱
Vulnerable
Version: 8.58
CPE:
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*
📱
Vulnerable
Version: 8.59
CPE:
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*
📱
Vulnerable
Version: ≥ 17.12.0 ∧ ≤ 17.12.11
CPE:
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
📱
Vulnerable
Version: ≥ 18.8.0 ∧ ≤ 18.8.12
CPE:
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
📱
Vulnerable
Version: ≥ 19.12.0 ∧ ≤ 19.12.11
CPE:
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
📱
Vulnerable
Version: ≥ 20.12.0 ∧ ≤ 20.12.7
CPE:
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
📱
Vulnerable
Version: ≥ 17.7 ∧ ≤ 17.12
CPE:
cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*
📱
Vulnerable
Version: 18.8
CPE:
cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
📱
Vulnerable
Version: 19.12
CPE:
cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*
📱
Vulnerable
Version: 20.12
CPE:
cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*
📱
Vulnerable
Version: 19.0
CPE:
cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:*
📱
siemens / sinec ins
Application
Vulnerable
Version: < 1.0
CPE:
cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*
📱
siemens / sinec ins
Application
Vulnerable
Version: 1.0
CPE:
cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*
📱
siemens / sinec ins
Application
Vulnerable
Version: 1.0
CPE:
cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*
42 products•scroll for more
Metrics
5.3 MEDIUMCVSS v3.1[email protected]
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector:
NETWORK
Complexity:
LOW
Privileges:
NONE
User Interaction:
NONE
Confidentiality:
NONE
Integrity:
NONE
Availability:
LOW
Scope:
UNCHANGED

🔍 Technical Details

Analysis Status
Modified
CVSS Details
5.3 (MEDIUM)v3.1
Source: [email protected]
EPSS Details
0.1% (Minimal)25.4th percentile
Last updated: Nov 1, 2025
Exploitation probability within 30 days
Published Date
Feb 15, 2021 (4 years ago)
Last Modified
Nov 21, 2024 (11 months ago)
Security Weaknesses1

Available exploits (1)

🔐 Sign-in Required

Sign in to view exploits and proof-of-concept code.

Sign InCreate Account
References9