NetSight
IP …
high7.4

CVE-2020-8203

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

Impact

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

Affected products

VendorProductAffected versions
LodashLodash
before 4.17.20
OracleBanking Corporate Lending Process Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Credit Facilities Process Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Extensibility Workbench
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Liquidity Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Supply Chain Finance
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Trade Finance Process Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Virtual Account Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBlockchain Platform
before 21.1.2
OracleCommunications Billing And Revenue Management
Versions 7.5.0.23.0, 12.0.0.3.0
OracleCommunications Cloud Native Core Policy
Version 1.11.0
OracleCommunications Session Border Controller
Versions 8.4, 9.0, cz8.4

Weakness classification

CWE-770CWE-1321

References