AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2020-5421.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSMEDIUM / 6.5CVSS 3.1 · nvd@nist.gov
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSModifiedModified Oct 08, 2026

Disclosure summary

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.

Source-reported weakness categories

NVD-CWE-noinfo

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST National Vulnerability Database · NVD-CVE-2020-5421

Open original source · Updated Oct 08, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
vmwarespring_framework* {"versionStartIncluding":"5.2.0","versionEndExcluding":"5.2.9"}
oraclecommerce_guided_search11.3.2
oraclecommunications_brm11.3.0.9
oraclecommunications_brm12.0.0.3
oraclecommunications_design_studio7.3.4
oraclecommunications_design_studio7.3.5
oraclecommunications_design_studio7.4.0
oraclecommunications_session_report_manager* {"versionStartIncluding":"8.2.1","versionEndIncluding":"8.2.2.1"}
oraclecommunications_unified_inventory_management7.3.4
oraclecommunications_unified_inventory_management7.3.5
oracleendeca_information_discovery_integrator3.2.0
oracleenterprise_data_quality12.2.1.3.0
oracleenterprise_data_quality12.2.1.4.0
oraclefinancial_services_analytical_applications_infrastructure* {"versionStartIncluding":"8.0.6","versionEndIncluding":"8.1.0"}
oracleflexcube_private_banking12.0.0
oracleflexcube_private_banking12.1.0
oraclefusion_middleware12.2.1.3.0
oraclefusion_middleware12.2.1.4.0
oraclegoldengate_application_adapters19.1.0.0.0
oraclehealthcare_master_person_index4.0.2.5
oraclehyperion_infrastructure_technology11.1.2.4
oracleinsurance_policy_administration* {"versionStartIncluding":"11.1.0","versionEndIncluding":"11.3.0"}
oracleinsurance_policy_administration10.2
oracleinsurance_policy_administration10.2.4
oracleinsurance_policy_administration11.0.2
oracleinsurance_rules_palette* {"versionStartIncluding":"11.1.0","versionEndIncluding":"11.3.0"}
oracleinsurance_rules_palette10.2.0
oracleinsurance_rules_palette10.2.4
oracleinsurance_rules_palette11.0.2
oraclemysql_enterprise_monitor* {"versionEndIncluding":"8.0.22"}
oraclemysql_enterprise_monitor8.0.23
oracleprimavera_gateway* {"versionStartIncluding":"19.12.0","versionEndIncluding":"19.12.10"}
oracleprimavera_p6_enterprise_project_portfolio_management* {"versionStartIncluding":"19.12.0","versionEndIncluding":"19.12.10"}
oracleretail_assortment_planning16.0.3.0
oracleretail_bulk_data_integration16.0.3.0
oracleretail_customer_engagement* {"versionStartIncluding":"16.0","versionEndIncluding":"19.0"}
oracleretail_customer_management_and_segmentation_foundation* {"versionStartIncluding":"16.0","versionEndIncluding":"19.0"}
oracleretail_financial_integration14.1.3
oracleretail_financial_integration15.0.3
oracleretail_financial_integration16.0.3
oracleretail_integration_bus14.1.3
oracleretail_integration_bus15.0.3
oracleretail_integration_bus16.0.3
oracleretail_invoice_matching14.0
oracleretail_invoice_matching14.1
oracleretail_merchandising_system16.0.3
oracleretail_order_broker15.0
oracleretail_order_broker16.0
oracleretail_predictive_application_server14.1
oracleretail_returns_management14.1
oracleretail_service_backbone14.1.3
oracleretail_service_backbone15.0.3
oracleretail_service_backbone16.0.3
oracleretail_xstore_point_of_service15.0.4
oracleretail_xstore_point_of_service16.0.6
oracleretail_xstore_point_of_service17.0.4
oracleretail_xstore_point_of_service18.0.3
oracleretail_xstore_point_of_service19.0.2
oraclestoragetek_acsls8.5.1
oraclestoragetek_tape_analytics_sw_tool2.3
oracleweblogic_server10.3.6.0.0
oracleweblogic_server12.1.3.0.0
oracleweblogic_server12.2.1.3.0
oracleweblogic_server12.2.1.4.0
oracleweblogic_server14.1.1.0.0
netapponcommand_insight-
netappsnap_creator_framework-
netappsnapcenter-

Original records & references

PUBLISHED 2020-09-19T00:15:11-04:00
MODIFIED 2026-10-08T17:17:30-04:00
INGESTED 2026-10-10T20:50:19-04:00