UpHeron
All vulnerabilities

Servers and applications

CVE-2020-13956

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Severity
Medium 5.3
Published
2 Dec 2020
Last changed
8 Oct 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Oracle WebLogic ServerServers and applications · cpe:a:oracle:weblogic_server
  • Version 12.2.1.4.0
  • Version 14.1.1.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-13956
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-13956