{"schema_version":"1.7.5","id":"CVE-2020-1971","published":"2020-12-08T16:15:11.730Z","modified":"2026-07-08T20:30:55.416407Z","aliases":["A-175147055","BIT-node-2020-1971","BIT-node-min-2020-1971","PUB-A-175147055"],"related":["CGA-9868-cj8x-rwcq","SUSE-FU-2022:0445-1","SUSE-SU-2020:14560-1","SUSE-SU-2020:3720-1","SUSE-SU-2020:3721-1","SUSE-SU-2020:3722-1","SUSE-SU-2020:3732-1","SUSE-SU-2020:3740-1","SUSE-SU-2020:3762-1","SUSE-SU-2020:3763-1","SUSE-SU-2021:0060-1","SUSE-SU-2021:0062-1","SUSE-SU-2021:0068-1","SUSE-SU-2021:0082-1","openSUSE-SU-2020:2223-1","openSUSE-SU-2020:2236-1","openSUSE-SU-2020:2245-1","openSUSE-SU-2020:2269-1","openSUSE-SU-2021:0064-1","openSUSE-SU-2021:0065-1","openSUSE-SU-2021:0082-1","openSUSE-SU-2024:11041-1","openSUSE-SU-2024:11127-1","openSUSE-SU-2024:11797-1","openSUSE-SU-2024:12687-1"],"details":"The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/graalvm/graalvm-ce-builds","events":[{"introduced":"4b00c1f1d35186b8ac562522370ad3982124bd80"},{"last_affected":"fab0396eab86e8236899c69d3a56baad00e5af14"}],"database_specific":{"cpe":["cpe:2.3:a:oracle:graalvm:19.3.4:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:graalvm:20.3.0:*:*:*:enterprise:*:*:*"],"extracted_events":[{"introduced":"19.3.4"},{"last_affected":"19.3.4"},{"introduced":"20.3.0"},{"last_affected":"20.3.0"}],"source":"CPE_STRING"}}],"versions":["19.3.4","20.3.0","vm-20.3.0","vm-19.3.4"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1971.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/mysql/mysql-server","events":[{"introduced":"0"},{"last_affected":"ee4455a33b10f1b1886044322e4893f587b319ed"},{"last_affected":"2032b65c44e242a7e452a38bf7626dfacc315b9c"},{"introduced":"ca94b993454c86be248fbe180db94647488114e9"},{"last_affected":"ee4455a33b10f1b1886044322e4893f587b319ed"}],"database_specific":{"cpe":["cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"last_affected":"8.0.22"},{"last_affected":"5.7.32"},{"introduced":"8.0.15"}],"source":"CPE_RANGE"}}],"versions":["mysql-cluster-8.0.22","mysql-8.0.22","mysql-5.7.32","mysql-5.7.31","mysql-5.1.4","mysql-4.0.4","mysql-4.0.2","mysql-3.23.36","mysql-3.23.33","mysql-3.23.32","mysql-3.23.31","mysql-3.23.30-gamma","mysql-3.23.28-gamma","mysql-3.23.22-beta"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1971.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/nodejs/node","events":[{"introduced":"cf41627411886000429bde058a6594fb7f6d6d47"},{"last_affected":"4a276cc2a960b3f9a138ac3a99c9249a63b4d472"},{"introduced":"ab4af087e83d91a46354d765306d3543b1d85423"},{"fixed":"811be91dfe623c7569f5fd87b1eaf46074334c94"},{"introduced":"2f45ad8060e13d5ac912335096d21526f2f9602b"},{"last_affected":"921493e2287aa895679620155b5288b2e1587bfd"},{"introduced":"42cce5a9d0fd905bf4ad7a2528c36572dfb8b5ad"},{"fixed":"87ddc7f10c6463bbcdd9dfc79f1e510a584e616e"},{"introduced":"73aa21658dfa6a22c06451d080152b32b1f98dbe"},{"last_affected":"354b6a93bd1d66f1833489d6fe01a2b0e8f6aff9"},{"introduced":"c1da528bc25c9cc5a8240a7b4f136f5968f6e113"},{"fixed":"04509d6847a2d164b223a77aed0c41fe9ca60e57"},{"introduced":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"fixed":"f978628b806b6650a90cd47e8b28590224af75e8"}],"database_specific":{"cpe":["cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*"],"extracted_events":[{"introduced":"10.0.0"},{"last_affected":"10.12.0"},{"introduced":"10.13.0"},{"fixed":"10.23.1"},{"introduced":"12.0.0"},{"last_affected":"12.12.0"},{"introduced":"12.13.0"},{"fixed":"12.20.1"},{"introduced":"14.0.0"},{"last_affected":"14.14.0"},{"introduced":"14.15.0"},{"fixed":"14.15.4"},{"introduced":"15.0.0"},{"fixed":"15.5.0"}],"source":"CPE_RANGE"}}],"versions":["v14.15.3","v14.15.2","v15.4.0","v12.20.0","v15.3.0","v12.19.1","v14.15.1","v15.2.1","v15.2.0","v15.1.0","v14.15.0","v10.23.0","v15.0.1","v15.0.0","v14.14.0","v14.13.1","v12.19.0","v14.13.0","v14.12.0","v12.18.4","v10.22.1","v14.11.0","v14.10.1","v14.10.0","v14.9.0","v14.8.0","v14.7.0","v12.18.3","v14.6.0","v10.22.0","v14.5.0","v12.18.2","v12.18.1","v12.18.0","v14.4.0","v10.21.0","v12.17.0","v14.3.0","v14.2.0","v14.1.0","v12.16.3","v14.0.0","v10.20.1","v12.16.2","v10.20.0","v12.16.1","v12.16.0","v10.19.0","v12.15.0","v10.18.1","v12.14.1","v12.14.0","v10.18.0","v12.13.1","v10.17.0","v12.13.0","v12.12.0","v12.11.1","v12.11.0","v12.10.0","v12.9.1","v12.9.0","v10.16.3","v12.8.1","v12.8.0","v10.16.2","v10.16.1","v12.7.0","v12.6.0","v12.5.0","v12.4.0","v10.16.0","v12.3.1","v12.3.0","v12.2.0","v12.1.0","v12.0.0","v10.15.3","v10.15.2","v10.15.1","v10.15.0","v10.14.2","v10.14.1","v10.14.0","v10.13.0","v10.12.0","v10.11.0","v10.10.0","v10.9.0","v10.8.0","v10.7.0","v10.6.0","v10.5.0","v10.4.1","v10.4.0","v10.3.0","v10.2.1","v10.2.0","v10.1.0","v10.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1971.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openssl/openssl","events":[{"introduced":"e818b74be2170fbe957a07b0da4401c2b694b3b8"},{"fixed":"e818b74be2170fbe957a07b0da4401c2b694b3b8"},{"introduced":"e04bd3433fd84e1861bf258ea37928d9845e6a86"},{"fixed":"e04bd3433fd84e1861bf258ea37928d9845e6a86"}],"database_specific":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.0.2"},{"fixed":"1.0.2x"},{"introduced":"1.1.1"},{"fixed":"1.1.1i"}],"source":"CPE_RANGE"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1971.json","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["28170854778703993674264004058177114599","73132526844288570625317440636111911761","177405411499435185068645597737938634778","224809958623850711330610094965797758930","295554444428855106393106961197201359586"],"threshold":0.9},"id":"CVE-2020-1971-c377fa22","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86","target":{"file":"include/openssl/opensslv.h"}},{"deprecated":false,"digest":{"line_hashes":["251633914150035957322733061977107206211","338514574181828579838011565939158652696","76638288692106140328510055542557597351","142922657400765574308962710386922248045","71649992455794854055653842592139575350","65527166711110472566013424527579064967","253196866009476977787139000804413898733","172177136897997206866313011107384691461"],"threshold":0.9},"id":"CVE-2020-1971-e051451f","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8","target":{"file":"crypto/opensslv.h"}}],"vanir_signatures_modified":"2026-07-08T20:30:55Z"}}],"references":[{"type":"WEB","url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e"},{"type":"WEB","url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2021/09/14/2"},{"type":"ADVISORY","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"},{"type":"ADVISORY","url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html"},{"type":"ADVISORY","url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202012-13"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20201218-0005/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20210513-0002/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20240621-0006/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2020/dsa-4807"},{"type":"ADVISORY","url":"https://www.openssl.org/news/secadv/20201208.txt"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujan2021.html"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"type":"ADVISORY","url":"https://www.tenable.com/security/tns-2020-11"},{"type":"ADVISORY","url":"https://www.tenable.com/security/tns-2021-09"},{"type":"ADVISORY","url":"https://www.tenable.com/security/tns-2021-10"},{"type":"FIX","url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuapr2022.html"}],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.0.0"},{"last_affected":"11.60.3"}],"source":"CPE_RANGE","vendor_product":"netapp:e-series_santricity_os_controller"},{"cpes":["cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0.0"},{"last_affected":"8.1.0"},{"introduced":"8.2.0"},{"last_affected":"8.2.3"}],"source":"CPE_RANGE","vendor_product":"oracle:communications_diameter_intelligence_hub"},{"cpes":["cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"9.2.5.3"}],"source":"CPE_RANGE","vendor_product":"oracle:jd_edwards_enterpriseone_tools"},{"cpes":["cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"1.0.1.1"}],"source":"CPE_RANGE","vendor_product":"siemens:sinec_infrastructure_network_services"},{"cpes":["cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"6.0.9"}],"source":"CPE_RANGE","vendor_product":"tenable:log_correlation_engine"},{"cpes":["cpe:2.3:a:tenable:nessus_network_monitor:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"5.13.1"}],"source":"CPE_RANGE","vendor_product":"tenable:nessus_network_monitor"},{"cpes":["cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"},{"introduced":"10.0"},{"last_affected":"10.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"},{"cpes":["cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"32"},{"last_affected":"32"},{"introduced":"33"},{"last_affected":"33"}],"source":"CPE_STRING","vendor_product":"fedoraproject:fedora"},{"cpes":["cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.1.2.4.0"},{"last_affected":"11.1.2.4.0"}],"source":"CPE_STRING","vendor_product":"oracle:api_gateway"},{"cpes":["cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*"],"extracted_events":[{"introduced":"5.5.0.0.0"},{"last_affected":"5.5.0.0.0"},{"introduced":"5.9.0.0.0"},{"last_affected":"5.9.0.0.0"},{"introduced":"12.2.1.3.0"},{"last_affected":"12.2.1.3.0"},{"introduced":"12.2.1.4.0"},{"last_affected":"12.2.1.4.0"}],"source":"CPE_STRING","vendor_product":"oracle:business_intelligence"},{"cpes":["cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.10.0"},{"last_affected":"1.10.0"}],"source":"CPE_STRING","vendor_product":"oracle:communications_cloud_native_core_network_function_cloud_native_environment"},{"cpes":["cpe:2.3:a:oracle:communications_session_border_controller:cz8.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_border_controller:cz8.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_border_controller:cz8.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"cz8.2"},{"last_affected":"cz8.2"},{"introduced":"cz8.3"},{"last_affected":"cz8.3"},{"introduced":"cz8.4"},{"last_affected":"cz8.4"}],"source":"CPE_STRING","vendor_product":"oracle:communications_session_border_controller"},{"cpes":["cpe:2.3:a:oracle:communications_session_router:cz8.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_router:cz8.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_router:cz8.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"cz8.2"},{"last_affected":"cz8.2"},{"introduced":"cz8.3"},{"last_affected":"cz8.3"},{"introduced":"cz8.4"},{"last_affected":"cz8.4"}],"source":"CPE_STRING","vendor_product":"oracle:communications_session_router"},{"cpes":["cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:cz8.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:cz8.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:cz8.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"cz8.2"},{"last_affected":"cz8.2"},{"introduced":"cz8.3"},{"last_affected":"cz8.3"},{"introduced":"cz8.4"},{"last_affected":"cz8.4"}],"source":"CPE_STRING","vendor_product":"oracle:communications_subscriber-aware_load_balancer"},{"cpes":["cpe:2.3:a:oracle:communications_unified_session_manager:scz8.2.5:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"scz8.2.5"},{"last_affected":"scz8.2.5"}],"source":"CPE_STRING","vendor_product":"oracle:communications_unified_session_manager"},{"cpes":["cpe:2.3:a:oracle:enterprise_communications_broker:pcz3.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_communications_broker:pcz3.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_communications_broker:pcz3.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"pcz3.1"},{"last_affected":"pcz3.1"},{"introduced":"pcz3.2"},{"last_affected":"pcz3.2"},{"introduced":"pcz3.3"},{"last_affected":"pcz3.3"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_communications_broker"},{"cpes":["cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"13.3.0.0"},{"last_affected":"13.3.0.0"},{"introduced":"13.4.0.0"},{"last_affected":"13.4.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_manager_base_platform"},{"cpes":["cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"13.4.0.0"},{"last_affected":"13.4.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_manager_for_storage_management"},{"cpes":["cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.4.0.0"},{"last_affected":"12.4.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_manager_ops_center"},{"cpes":["cpe:2.3:a:oracle:enterprise_session_border_controller:cz8.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_session_border_controller:cz8.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_session_border_controller:cz8.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"cz8.2"},{"last_affected":"cz8.2"},{"introduced":"cz8.3"},{"last_affected":"cz8.3"},{"introduced":"cz8.4"},{"last_affected":"cz8.4"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_session_border_controller"},{"cpes":["cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"21.2"},{"last_affected":"21.2"}],"source":"CPE_STRING","vendor_product":"oracle:essbase"},{"cpes":["cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.2.1.4.0"},{"last_affected":"12.2.1.4.0"}],"source":"CPE_STRING","vendor_product":"oracle:http_server"},{"cpes":["cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"a9.4"},{"last_affected":"a9.4"}],"source":"CPE_STRING","vendor_product":"oracle:jd_edwards_world_security"},{"cpes":["cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.56"},{"last_affected":"8.56"},{"introduced":"8.57"},{"last_affected":"8.57"},{"introduced":"8.58"},{"last_affected":"8.58"}],"source":"CPE_STRING","vendor_product":"oracle:peoplesoft_enterprise_peopletools"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}