CVE catalog

CVE-2020-13936

velocity: CVE-2020-13936

[CVE catalog]

Severity
High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
22.71% · Oct 25, 2026

An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity templates running Apache Velocity Engine versions up to 2.2.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianvelocitysid1.7-7fixed
Debianvelocityforky1.7-7fixed
Debianvelocitytrixie1.7-7fixed
Debianvelocitybookworm1.7-6fixed
Ubuntuvelocitypro1.7-5vulnerable
Ubuntuvelocitypro1.7-5ubuntu0.18.04.1~esm1fixed
Ubuntuvelocity20.041.7-5vulnerable
Ubuntuvelocity20.041.7-5+deb9u1build0.20.04.1fixed
Opensusevelocitytumbleweed1.7-9.3fixed
Susesnakeyamllinux enterprise module for development tools 15 sp31.31-150200.3.8.1fixed
Susesnakeyamllinux enterprise module for development tools 15 sp41.31-150200.3.8.1fixed
Susesnakeyamlmanager server module 4.21.31-150200.3.8.1fixed
Susesnakeyamlmanager server module 4.31.31-150200.3.8.1fixed
Opensusesnakeyamlleap 15.31.31-150200.3.8.1fixed
Opensusesnakeyamlleap 15.41.31-150200.3.8.1fixed
Ubuntuvelocitypro1.7-5vulnerable
Ubuntuvelocitypro1.7-5ubuntu0.18.04.1~esm1fixed
Ubuntuvelocity20.041.7-5vulnerable
Ubuntuvelocity20.041.7-5+deb9u1build0.20.04.1fixed
Susemaven-invokerlinux enterprise module for development tools 15 sp63.3.0-150200.3.7.5fixed
Susemaven-plugin-toolslinux enterprise module for development tools 15 sp63.15.1-150200.3.15.12fixed
Susemaven-surefirelinux enterprise module for development tools 15 sp63.5.2-150200.3.9.20.12fixed
Susemaven-surefire-pluginslinux enterprise module for development tools 15 sp63.5.2-150200.3.9.20.2fixed
Susemaven-doxialinux enterprise high performance computing 15 sp3-ltss2.0.0-150200.4.18.11fixed
Susemaven-doxia-sitetoolslinux enterprise high performance computing 15 sp3-ltss2.0.0-150200.3.18.3fixed
Susemaven-invokerlinux enterprise high performance computing 15 sp3-ltss3.3.0-150200.3.7.5fixed
Susemaven-javadoc-pluginlinux enterprise high performance computing 15 sp3-ltss3.11.1-150200.4.21.2fixed
Susemaven-plugin-toolslinux enterprise high performance computing 15 sp3-ltss3.15.1-150200.3.15.12fixed
Susemaven-reporting-apilinux enterprise high performance computing 15 sp3-ltss4.0.0-150200.3.10.12fixed
Susemaven-surefirelinux enterprise high performance computing 15 sp3-ltss3.5.2-150200.3.9.20.12fixed
Susemaven-surefire-pluginslinux enterprise high performance computing 15 sp3-ltss3.5.2-150200.3.9.20.2fixed
Suseplexus-velocitylinux enterprise high performance computing 15 sp3-ltss2.1.0-150200.3.10.3fixed
Susevelocity-engine-corelinux enterprise high performance computing 15 sp3-ltss2.4-150200.5.3.3fixed
Susemaven-doxialinux enterprise high performance computing 15 sp4-espos2.0.0-150200.4.18.11fixed
Susemaven-doxia-sitetoolslinux enterprise high performance computing 15 sp4-espos2.0.0-150200.3.18.3fixed
Susemaven-invokerlinux enterprise high performance computing 15 sp4-espos3.3.0-150200.3.7.5fixed
Susemaven-javadoc-pluginlinux enterprise high performance computing 15 sp4-espos3.11.1-150200.4.21.2fixed
Susemaven-plugin-toolslinux enterprise high performance computing 15 sp4-espos3.15.1-150200.3.15.12fixed
Susemaven-reporting-apilinux enterprise high performance computing 15 sp4-espos4.0.0-150200.3.10.12fixed
Susemaven-surefirelinux enterprise high performance computing 15 sp4-espos3.5.2-150200.3.9.20.12fixed
Susemaven-surefire-pluginslinux enterprise high performance computing 15 sp4-espos3.5.2-150200.3.9.20.2fixed
Suseplexus-velocitylinux enterprise high performance computing 15 sp4-espos2.1.0-150200.3.10.3fixed
Susevelocity-engine-corelinux enterprise high performance computing 15 sp4-espos2.4-150200.5.3.3fixed
Susemaven-doxialinux enterprise high performance computing 15 sp4-ltss2.0.0-150200.4.18.11fixed
Susemaven-doxia-sitetoolslinux enterprise high performance computing 15 sp4-ltss2.0.0-150200.3.18.3fixed
Susemaven-invokerlinux enterprise high performance computing 15 sp4-ltss3.3.0-150200.3.7.5fixed
Susemaven-javadoc-pluginlinux enterprise high performance computing 15 sp4-ltss3.11.1-150200.4.21.2fixed
Susemaven-plugin-toolslinux enterprise high performance computing 15 sp4-ltss3.15.1-150200.3.15.12fixed
Susemaven-reporting-apilinux enterprise high performance computing 15 sp4-ltss4.0.0-150200.3.10.12fixed
Susemaven-surefirelinux enterprise high performance computing 15 sp4-ltss3.5.2-150200.3.9.20.12fixed
Susemaven-surefire-pluginslinux enterprise high performance computing 15 sp4-ltss3.5.2-150200.3.9.20.2fixed
Suseplexus-velocitylinux enterprise high performance computing 15 sp4-ltss2.1.0-150200.3.10.3fixed
Susevelocity-engine-corelinux enterprise high performance computing 15 sp4-ltss2.4-150200.5.3.3fixed
Susemaven-doxialinux enterprise high performance computing 15 sp5-espos2.0.0-150200.4.18.11fixed
Susemaven-doxia-sitetoolslinux enterprise high performance computing 15 sp5-espos2.0.0-150200.3.18.3fixed
Susemaven-invokerlinux enterprise high performance computing 15 sp5-espos3.3.0-150200.3.7.5fixed
Susemaven-javadoc-pluginlinux enterprise high performance computing 15 sp5-espos3.11.1-150200.4.21.2fixed
Susemaven-plugin-toolslinux enterprise high performance computing 15 sp5-espos3.15.1-150200.3.15.12fixed
Susemaven-reporting-apilinux enterprise high performance computing 15 sp5-espos4.0.0-150200.3.10.12fixed
Susemaven-surefirelinux enterprise high performance computing 15 sp5-espos3.5.2-150200.3.9.20.12fixed
Susemaven-surefire-pluginslinux enterprise high performance computing 15 sp5-espos3.5.2-150200.3.9.20.2fixed
Suseplexus-velocitylinux enterprise high performance computing 15 sp5-espos2.1.0-150200.3.10.3fixed
Susevelocity-engine-corelinux enterprise high performance computing 15 sp5-espos2.4-150200.5.3.3fixed
Susemaven-doxialinux enterprise high performance computing 15 sp5-ltss2.0.0-150200.4.18.11fixed
Susemaven-doxia-sitetoolslinux enterprise high performance computing 15 sp5-ltss2.0.0-150200.3.18.3fixed
Susemaven-invokerlinux enterprise high performance computing 15 sp5-ltss3.3.0-150200.3.7.5fixed
Susemaven-javadoc-pluginlinux enterprise high performance computing 15 sp5-ltss3.11.1-150200.4.21.2fixed
Susemaven-plugin-toolslinux enterprise high performance computing 15 sp5-ltss3.15.1-150200.3.15.12fixed
Susemaven-reporting-apilinux enterprise high performance computing 15 sp5-ltss4.0.0-150200.3.10.12fixed
Susemaven-surefirelinux enterprise high performance computing 15 sp5-ltss3.5.2-150200.3.9.20.12fixed
Susemaven-surefire-pluginslinux enterprise high performance computing 15 sp5-ltss3.5.2-150200.3.9.20.2fixed
Suseplexus-velocitylinux enterprise high performance computing 15 sp5-ltss2.1.0-150200.3.10.3fixed
Susevelocity-engine-corelinux enterprise high performance computing 15 sp5-ltss2.4-150200.5.3.3fixed
Susemaven-doxialinux enterprise server 15 sp3-ltss2.0.0-150200.4.18.11fixed
Susemaven-doxia-sitetoolslinux enterprise server 15 sp3-ltss2.0.0-150200.3.18.3fixed
Susemaven-invokerlinux enterprise server 15 sp3-ltss3.3.0-150200.3.7.5fixed
Susemaven-javadoc-pluginlinux enterprise server 15 sp3-ltss3.11.1-150200.4.21.2fixed
Susemaven-plugin-toolslinux enterprise server 15 sp3-ltss3.15.1-150200.3.15.12fixed
Susemaven-reporting-apilinux enterprise server 15 sp3-ltss4.0.0-150200.3.10.12fixed
Susemaven-surefirelinux enterprise server 15 sp3-ltss3.5.2-150200.3.9.20.12fixed
Susemaven-surefire-pluginslinux enterprise server 15 sp3-ltss3.5.2-150200.3.9.20.2fixed
Suseplexus-velocitylinux enterprise server 15 sp3-ltss2.1.0-150200.3.10.3fixed
Susevelocity-engine-corelinux enterprise server 15 sp3-ltss2.4-150200.5.3.3fixed
Susemaven-doxialinux enterprise server 15 sp4-ltss2.0.0-150200.4.18.11fixed
Susemaven-doxia-sitetoolslinux enterprise server 15 sp4-ltss2.0.0-150200.3.18.3fixed
Susemaven-invokerlinux enterprise server 15 sp4-ltss3.3.0-150200.3.7.5fixed
Susemaven-javadoc-pluginlinux enterprise server 15 sp4-ltss3.11.1-150200.4.21.2fixed
Susemaven-plugin-toolslinux enterprise server 15 sp4-ltss3.15.1-150200.3.15.12fixed
Susemaven-reporting-apilinux enterprise server 15 sp4-ltss4.0.0-150200.3.10.12fixed
Susemaven-surefirelinux enterprise server 15 sp4-ltss3.5.2-150200.3.9.20.12fixed
Susemaven-surefire-pluginslinux enterprise server 15 sp4-ltss3.5.2-150200.3.9.20.2fixed
Suseplexus-velocitylinux enterprise server 15 sp4-ltss2.1.0-150200.3.10.3fixed
Susevelocity-engine-corelinux enterprise server 15 sp4-ltss2.4-150200.5.3.3fixed
Susemaven-doxialinux enterprise server 15 sp5-ltss2.0.0-150200.4.18.11fixed
Susemaven-doxia-sitetoolslinux enterprise server 15 sp5-ltss2.0.0-150200.3.18.3fixed
Susemaven-invokerlinux enterprise server 15 sp5-ltss3.3.0-150200.3.7.5fixed
Susemaven-javadoc-pluginlinux enterprise server 15 sp5-ltss3.11.1-150200.4.21.2fixed
Susemaven-plugin-toolslinux enterprise server 15 sp5-ltss3.15.1-150200.3.15.12fixed
Susemaven-reporting-apilinux enterprise server 15 sp5-ltss4.0.0-150200.3.10.12fixed
Susemaven-surefirelinux enterprise server 15 sp5-ltss3.5.2-150200.3.9.20.12fixed
Susemaven-surefire-pluginslinux enterprise server 15 sp5-ltss3.5.2-150200.3.9.20.2fixed
Suseplexus-velocitylinux enterprise server 15 sp5-ltss2.1.0-150200.3.10.3fixed
Susevelocity-engine-corelinux enterprise server 15 sp5-ltss2.4-150200.5.3.3fixed
Susemaven-doxialinux enterprise server for sap applications 15 sp32.0.0-150200.4.18.11fixed
Susemaven-doxia-sitetoolslinux enterprise server for sap applications 15 sp32.0.0-150200.3.18.3fixed
Susemaven-invokerlinux enterprise server for sap applications 15 sp33.3.0-150200.3.7.5fixed
Susemaven-javadoc-pluginlinux enterprise server for sap applications 15 sp33.11.1-150200.4.21.2fixed
Susemaven-plugin-toolslinux enterprise server for sap applications 15 sp33.15.1-150200.3.15.12fixed
Susemaven-reporting-apilinux enterprise server for sap applications 15 sp34.0.0-150200.3.10.12fixed
Susemaven-surefirelinux enterprise server for sap applications 15 sp33.5.2-150200.3.9.20.12fixed
Susemaven-surefire-pluginslinux enterprise server for sap applications 15 sp33.5.2-150200.3.9.20.2fixed
Suseplexus-velocitylinux enterprise server for sap applications 15 sp32.1.0-150200.3.10.3fixed
Susevelocity-engine-corelinux enterprise server for sap applications 15 sp32.4-150200.5.3.3fixed
Susemaven-doxialinux enterprise server for sap applications 15 sp42.0.0-150200.4.18.11fixed
Susemaven-doxia-sitetoolslinux enterprise server for sap applications 15 sp42.0.0-150200.3.18.3fixed
Susemaven-invokerlinux enterprise server for sap applications 15 sp43.3.0-150200.3.7.5fixed
Susemaven-javadoc-pluginlinux enterprise server for sap applications 15 sp43.11.1-150200.4.21.2fixed
Susemaven-plugin-toolslinux enterprise server for sap applications 15 sp43.15.1-150200.3.15.12fixed
Susemaven-reporting-apilinux enterprise server for sap applications 15 sp44.0.0-150200.3.10.12fixed
Susemaven-surefirelinux enterprise server for sap applications 15 sp43.5.2-150200.3.9.20.12fixed
Susemaven-surefire-pluginslinux enterprise server for sap applications 15 sp43.5.2-150200.3.9.20.2fixed
Suseplexus-velocitylinux enterprise server for sap applications 15 sp42.1.0-150200.3.10.3fixed
Susevelocity-engine-corelinux enterprise server for sap applications 15 sp42.4-150200.5.3.3fixed
Susemaven-doxialinux enterprise server for sap applications 15 sp52.0.0-150200.4.18.11fixed
Susemaven-doxia-sitetoolslinux enterprise server for sap applications 15 sp52.0.0-150200.3.18.3fixed
Susemaven-invokerlinux enterprise server for sap applications 15 sp53.3.0-150200.3.7.5fixed
Susemaven-javadoc-pluginlinux enterprise server for sap applications 15 sp53.11.1-150200.4.21.2fixed
Susemaven-plugin-toolslinux enterprise server for sap applications 15 sp53.15.1-150200.3.15.12fixed
Susemaven-reporting-apilinux enterprise server for sap applications 15 sp54.0.0-150200.3.10.12fixed
Susemaven-surefirelinux enterprise server for sap applications 15 sp53.5.2-150200.3.9.20.12fixed
Susemaven-surefire-pluginslinux enterprise server for sap applications 15 sp53.5.2-150200.3.9.20.2fixed
Suseplexus-velocitylinux enterprise server for sap applications 15 sp52.1.0-150200.3.10.3fixed
Susevelocity-engine-corelinux enterprise server for sap applications 15 sp52.4-150200.5.3.3fixed
Susemaven-doxiaenterprise storage 7.12.0.0-150200.4.18.11fixed
Susemaven-doxia-sitetoolsenterprise storage 7.12.0.0-150200.3.18.3fixed
Susemaven-invokerenterprise storage 7.13.3.0-150200.3.7.5fixed
Susemaven-javadoc-pluginenterprise storage 7.13.11.1-150200.4.21.2fixed
Susemaven-plugin-toolsenterprise storage 7.13.15.1-150200.3.15.12fixed
Susemaven-reporting-apienterprise storage 7.14.0.0-150200.3.10.12fixed
Susemaven-surefireenterprise storage 7.13.5.2-150200.3.9.20.12fixed
Susemaven-surefire-pluginsenterprise storage 7.13.5.2-150200.3.9.20.2fixed
Suseplexus-velocityenterprise storage 7.12.1.0-150200.3.10.3fixed
Susevelocity-engine-coreenterprise storage 7.12.4-150200.5.3.3fixed
Opensusemaven-dependency-analyzerleap 15.61.15.1-150200.3.10.3fixed
Opensusemaven-dependency-pluginleap 15.63.8.1-150200.3.10.2fixed
Opensusemaven-doxialeap 15.62.0.0-150200.4.18.11fixed
Opensusemaven-doxia-sitetoolsleap 15.62.0.0-150200.3.18.3fixed
Opensusemaven-invokerleap 15.63.3.0-150200.3.7.5fixed
Opensusemaven-invoker-pluginleap 15.63.8.1-150200.3.6.2fixed
Opensusemaven-javadoc-pluginleap 15.63.11.1-150200.4.21.2fixed
Opensusemaven-javadoc-plugin-bootstrapleap 15.63.11.1-150200.4.21.2fixed
Opensusemaven-parentleap 15.643-150200.3.8.2fixed
Opensusemaven-plugin-pluginleap 15.63.15.1-150200.3.15.2fixed
Opensusemaven-plugin-plugin-bootstrapleap 15.63.15.1-150200.3.15.2fixed
Opensusemaven-plugin-toolsleap 15.63.15.1-150200.3.15.12fixed
Opensusemaven-reporting-apileap 15.64.0.0-150200.3.10.12fixed
Opensusemaven-reporting-implleap 15.64.0.0-150200.4.9.12fixed
Opensusemaven-surefireleap 15.63.5.2-150200.3.9.20.12fixed
Opensusemaven-surefire-pluginsleap 15.63.5.2-150200.3.9.20.2fixed
Opensusemaven-surefire-provider-junit5leap 15.63.5.2-150200.3.9.20.2fixed
Opensuseplexus-velocityleap 15.62.1.0-150200.3.10.3fixed
Opensusevelocity-engine-coreleap 15.62.4-150200.5.3.3fixed
Susevelocitylinux enterprise module for development tools 15 sp21.7-3.3.1fixed
Susesnakeyamlmanager server module 4.11.31-150200.12.6.1fixed
Opensusevelocityleap 15.21.7-lp152.5.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianvelocitysourcesid1.7-6not yet assignedNot reported[985220]
Debianvelocitysourceforky1.7-6not yet assignedNot reported[985220]
Debianvelocitysourcetrixie1.7-6not yet assignedNot reported[985220]
Debianvelocitysourcebookworm1.7-6not yet assignedNot reported[985220]
Ubuntuvelocitydebpro1.7-5ubuntu0.18.04.1~esm1Not reportedUSN-6281-1Not reported
Ubuntuvelocitydeb20.041.7-5+deb9u1build0.20.04.1Not reportedUSN-6281-1Not reported
Opensusevelocityrpmtumbleweed1.7-9.3Not reportedOPENSUSE-SU-2024:11495-1Not reported
Susesnakeyamlrpmlinux enterprise module for development tools 15 sp31.31-150200.3.8.1Not reportedSUSE-SU-2022:3397-1Not reported
Susesnakeyamlrpmlinux enterprise module for development tools 15 sp41.31-150200.3.8.1Not reportedSUSE-SU-2022:3397-1Not reported
Susesnakeyamlrpmmanager server module 4.21.31-150200.3.8.1Not reportedSUSE-SU-2022:3397-1Not reported
Susesnakeyamlrpmmanager server module 4.31.31-150200.3.8.1Not reportedSUSE-SU-2022:3397-1Not reported
Opensusesnakeyamlrpmleap 15.31.31-150200.3.8.1Not reportedSUSE-SU-2022:3397-1Not reported
Opensusesnakeyamlrpmleap 15.41.31-150200.3.8.1Not reportedSUSE-SU-2022:3397-1Not reported
Ubuntuvelocitydebpro1.7-5ubuntu0.18.04.1~esm1Not reportedUBUNTU-CVE-2020-13936Not reported
Ubuntuvelocitydeb20.041.7-5+deb9u1build0.20.04.1Not reportedUBUNTU-CVE-2020-13936Not reported
Susemaven-invokerrpmlinux enterprise module for development tools 15 sp63.3.0-150200.3.7.5Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-plugin-toolsrpmlinux enterprise module for development tools 15 sp63.15.1-150200.3.15.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefirerpmlinux enterprise module for development tools 15 sp63.5.2-150200.3.9.20.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefire-pluginsrpmlinux enterprise module for development tools 15 sp63.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxiarpmlinux enterprise high performance computing 15 sp3-ltss2.0.0-150200.4.18.11Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxia-sitetoolsrpmlinux enterprise high performance computing 15 sp3-ltss2.0.0-150200.3.18.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-invokerrpmlinux enterprise high performance computing 15 sp3-ltss3.3.0-150200.3.7.5Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-javadoc-pluginrpmlinux enterprise high performance computing 15 sp3-ltss3.11.1-150200.4.21.2Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-plugin-toolsrpmlinux enterprise high performance computing 15 sp3-ltss3.15.1-150200.3.15.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-reporting-apirpmlinux enterprise high performance computing 15 sp3-ltss4.0.0-150200.3.10.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefirerpmlinux enterprise high performance computing 15 sp3-ltss3.5.2-150200.3.9.20.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefire-pluginsrpmlinux enterprise high performance computing 15 sp3-ltss3.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Suseplexus-velocityrpmlinux enterprise high performance computing 15 sp3-ltss2.1.0-150200.3.10.3Not reportedSUSE-SU-2025:0719-1Not reported
Susevelocity-engine-corerpmlinux enterprise high performance computing 15 sp3-ltss2.4-150200.5.3.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxiarpmlinux enterprise high performance computing 15 sp4-espos2.0.0-150200.4.18.11Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxia-sitetoolsrpmlinux enterprise high performance computing 15 sp4-espos2.0.0-150200.3.18.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-invokerrpmlinux enterprise high performance computing 15 sp4-espos3.3.0-150200.3.7.5Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-javadoc-pluginrpmlinux enterprise high performance computing 15 sp4-espos3.11.1-150200.4.21.2Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-plugin-toolsrpmlinux enterprise high performance computing 15 sp4-espos3.15.1-150200.3.15.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-reporting-apirpmlinux enterprise high performance computing 15 sp4-espos4.0.0-150200.3.10.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefirerpmlinux enterprise high performance computing 15 sp4-espos3.5.2-150200.3.9.20.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefire-pluginsrpmlinux enterprise high performance computing 15 sp4-espos3.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Suseplexus-velocityrpmlinux enterprise high performance computing 15 sp4-espos2.1.0-150200.3.10.3Not reportedSUSE-SU-2025:0719-1Not reported
Susevelocity-engine-corerpmlinux enterprise high performance computing 15 sp4-espos2.4-150200.5.3.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxiarpmlinux enterprise high performance computing 15 sp4-ltss2.0.0-150200.4.18.11Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxia-sitetoolsrpmlinux enterprise high performance computing 15 sp4-ltss2.0.0-150200.3.18.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-invokerrpmlinux enterprise high performance computing 15 sp4-ltss3.3.0-150200.3.7.5Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-javadoc-pluginrpmlinux enterprise high performance computing 15 sp4-ltss3.11.1-150200.4.21.2Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-plugin-toolsrpmlinux enterprise high performance computing 15 sp4-ltss3.15.1-150200.3.15.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-reporting-apirpmlinux enterprise high performance computing 15 sp4-ltss4.0.0-150200.3.10.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefirerpmlinux enterprise high performance computing 15 sp4-ltss3.5.2-150200.3.9.20.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefire-pluginsrpmlinux enterprise high performance computing 15 sp4-ltss3.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Suseplexus-velocityrpmlinux enterprise high performance computing 15 sp4-ltss2.1.0-150200.3.10.3Not reportedSUSE-SU-2025:0719-1Not reported
Susevelocity-engine-corerpmlinux enterprise high performance computing 15 sp4-ltss2.4-150200.5.3.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxiarpmlinux enterprise high performance computing 15 sp5-espos2.0.0-150200.4.18.11Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxia-sitetoolsrpmlinux enterprise high performance computing 15 sp5-espos2.0.0-150200.3.18.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-invokerrpmlinux enterprise high performance computing 15 sp5-espos3.3.0-150200.3.7.5Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-javadoc-pluginrpmlinux enterprise high performance computing 15 sp5-espos3.11.1-150200.4.21.2Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-plugin-toolsrpmlinux enterprise high performance computing 15 sp5-espos3.15.1-150200.3.15.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-reporting-apirpmlinux enterprise high performance computing 15 sp5-espos4.0.0-150200.3.10.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefirerpmlinux enterprise high performance computing 15 sp5-espos3.5.2-150200.3.9.20.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefire-pluginsrpmlinux enterprise high performance computing 15 sp5-espos3.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Suseplexus-velocityrpmlinux enterprise high performance computing 15 sp5-espos2.1.0-150200.3.10.3Not reportedSUSE-SU-2025:0719-1Not reported
Susevelocity-engine-corerpmlinux enterprise high performance computing 15 sp5-espos2.4-150200.5.3.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxiarpmlinux enterprise high performance computing 15 sp5-ltss2.0.0-150200.4.18.11Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxia-sitetoolsrpmlinux enterprise high performance computing 15 sp5-ltss2.0.0-150200.3.18.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-invokerrpmlinux enterprise high performance computing 15 sp5-ltss3.3.0-150200.3.7.5Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-javadoc-pluginrpmlinux enterprise high performance computing 15 sp5-ltss3.11.1-150200.4.21.2Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-plugin-toolsrpmlinux enterprise high performance computing 15 sp5-ltss3.15.1-150200.3.15.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-reporting-apirpmlinux enterprise high performance computing 15 sp5-ltss4.0.0-150200.3.10.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefirerpmlinux enterprise high performance computing 15 sp5-ltss3.5.2-150200.3.9.20.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefire-pluginsrpmlinux enterprise high performance computing 15 sp5-ltss3.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Suseplexus-velocityrpmlinux enterprise high performance computing 15 sp5-ltss2.1.0-150200.3.10.3Not reportedSUSE-SU-2025:0719-1Not reported
Susevelocity-engine-corerpmlinux enterprise high performance computing 15 sp5-ltss2.4-150200.5.3.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxiarpmlinux enterprise server 15 sp3-ltss2.0.0-150200.4.18.11Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxia-sitetoolsrpmlinux enterprise server 15 sp3-ltss2.0.0-150200.3.18.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-invokerrpmlinux enterprise server 15 sp3-ltss3.3.0-150200.3.7.5Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-javadoc-pluginrpmlinux enterprise server 15 sp3-ltss3.11.1-150200.4.21.2Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-plugin-toolsrpmlinux enterprise server 15 sp3-ltss3.15.1-150200.3.15.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-reporting-apirpmlinux enterprise server 15 sp3-ltss4.0.0-150200.3.10.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefirerpmlinux enterprise server 15 sp3-ltss3.5.2-150200.3.9.20.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefire-pluginsrpmlinux enterprise server 15 sp3-ltss3.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Suseplexus-velocityrpmlinux enterprise server 15 sp3-ltss2.1.0-150200.3.10.3Not reportedSUSE-SU-2025:0719-1Not reported
Susevelocity-engine-corerpmlinux enterprise server 15 sp3-ltss2.4-150200.5.3.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxiarpmlinux enterprise server 15 sp4-ltss2.0.0-150200.4.18.11Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxia-sitetoolsrpmlinux enterprise server 15 sp4-ltss2.0.0-150200.3.18.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-invokerrpmlinux enterprise server 15 sp4-ltss3.3.0-150200.3.7.5Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-javadoc-pluginrpmlinux enterprise server 15 sp4-ltss3.11.1-150200.4.21.2Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-plugin-toolsrpmlinux enterprise server 15 sp4-ltss3.15.1-150200.3.15.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-reporting-apirpmlinux enterprise server 15 sp4-ltss4.0.0-150200.3.10.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefirerpmlinux enterprise server 15 sp4-ltss3.5.2-150200.3.9.20.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefire-pluginsrpmlinux enterprise server 15 sp4-ltss3.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Suseplexus-velocityrpmlinux enterprise server 15 sp4-ltss2.1.0-150200.3.10.3Not reportedSUSE-SU-2025:0719-1Not reported
Susevelocity-engine-corerpmlinux enterprise server 15 sp4-ltss2.4-150200.5.3.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxiarpmlinux enterprise server 15 sp5-ltss2.0.0-150200.4.18.11Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxia-sitetoolsrpmlinux enterprise server 15 sp5-ltss2.0.0-150200.3.18.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-invokerrpmlinux enterprise server 15 sp5-ltss3.3.0-150200.3.7.5Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-javadoc-pluginrpmlinux enterprise server 15 sp5-ltss3.11.1-150200.4.21.2Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-plugin-toolsrpmlinux enterprise server 15 sp5-ltss3.15.1-150200.3.15.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-reporting-apirpmlinux enterprise server 15 sp5-ltss4.0.0-150200.3.10.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefirerpmlinux enterprise server 15 sp5-ltss3.5.2-150200.3.9.20.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefire-pluginsrpmlinux enterprise server 15 sp5-ltss3.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Suseplexus-velocityrpmlinux enterprise server 15 sp5-ltss2.1.0-150200.3.10.3Not reportedSUSE-SU-2025:0719-1Not reported
Susevelocity-engine-corerpmlinux enterprise server 15 sp5-ltss2.4-150200.5.3.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxiarpmlinux enterprise server for sap applications 15 sp32.0.0-150200.4.18.11Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxia-sitetoolsrpmlinux enterprise server for sap applications 15 sp32.0.0-150200.3.18.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-invokerrpmlinux enterprise server for sap applications 15 sp33.3.0-150200.3.7.5Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-javadoc-pluginrpmlinux enterprise server for sap applications 15 sp33.11.1-150200.4.21.2Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-plugin-toolsrpmlinux enterprise server for sap applications 15 sp33.15.1-150200.3.15.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-reporting-apirpmlinux enterprise server for sap applications 15 sp34.0.0-150200.3.10.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefirerpmlinux enterprise server for sap applications 15 sp33.5.2-150200.3.9.20.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefire-pluginsrpmlinux enterprise server for sap applications 15 sp33.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Suseplexus-velocityrpmlinux enterprise server for sap applications 15 sp32.1.0-150200.3.10.3Not reportedSUSE-SU-2025:0719-1Not reported
Susevelocity-engine-corerpmlinux enterprise server for sap applications 15 sp32.4-150200.5.3.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxiarpmlinux enterprise server for sap applications 15 sp42.0.0-150200.4.18.11Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxia-sitetoolsrpmlinux enterprise server for sap applications 15 sp42.0.0-150200.3.18.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-invokerrpmlinux enterprise server for sap applications 15 sp43.3.0-150200.3.7.5Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-javadoc-pluginrpmlinux enterprise server for sap applications 15 sp43.11.1-150200.4.21.2Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-plugin-toolsrpmlinux enterprise server for sap applications 15 sp43.15.1-150200.3.15.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-reporting-apirpmlinux enterprise server for sap applications 15 sp44.0.0-150200.3.10.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefirerpmlinux enterprise server for sap applications 15 sp43.5.2-150200.3.9.20.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefire-pluginsrpmlinux enterprise server for sap applications 15 sp43.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Suseplexus-velocityrpmlinux enterprise server for sap applications 15 sp42.1.0-150200.3.10.3Not reportedSUSE-SU-2025:0719-1Not reported
Susevelocity-engine-corerpmlinux enterprise server for sap applications 15 sp42.4-150200.5.3.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxiarpmlinux enterprise server for sap applications 15 sp52.0.0-150200.4.18.11Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxia-sitetoolsrpmlinux enterprise server for sap applications 15 sp52.0.0-150200.3.18.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-invokerrpmlinux enterprise server for sap applications 15 sp53.3.0-150200.3.7.5Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-javadoc-pluginrpmlinux enterprise server for sap applications 15 sp53.11.1-150200.4.21.2Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-plugin-toolsrpmlinux enterprise server for sap applications 15 sp53.15.1-150200.3.15.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-reporting-apirpmlinux enterprise server for sap applications 15 sp54.0.0-150200.3.10.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefirerpmlinux enterprise server for sap applications 15 sp53.5.2-150200.3.9.20.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefire-pluginsrpmlinux enterprise server for sap applications 15 sp53.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Suseplexus-velocityrpmlinux enterprise server for sap applications 15 sp52.1.0-150200.3.10.3Not reportedSUSE-SU-2025:0719-1Not reported
Susevelocity-engine-corerpmlinux enterprise server for sap applications 15 sp52.4-150200.5.3.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxiarpmenterprise storage 7.12.0.0-150200.4.18.11Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-doxia-sitetoolsrpmenterprise storage 7.12.0.0-150200.3.18.3Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-invokerrpmenterprise storage 7.13.3.0-150200.3.7.5Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-javadoc-pluginrpmenterprise storage 7.13.11.1-150200.4.21.2Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-plugin-toolsrpmenterprise storage 7.13.15.1-150200.3.15.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-reporting-apirpmenterprise storage 7.14.0.0-150200.3.10.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefirerpmenterprise storage 7.13.5.2-150200.3.9.20.12Not reportedSUSE-SU-2025:0719-1Not reported
Susemaven-surefire-pluginsrpmenterprise storage 7.13.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Suseplexus-velocityrpmenterprise storage 7.12.1.0-150200.3.10.3Not reportedSUSE-SU-2025:0719-1Not reported
Susevelocity-engine-corerpmenterprise storage 7.12.4-150200.5.3.3Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-dependency-analyzerrpmleap 15.61.15.1-150200.3.10.3Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-dependency-pluginrpmleap 15.63.8.1-150200.3.10.2Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-doxiarpmleap 15.62.0.0-150200.4.18.11Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-doxia-sitetoolsrpmleap 15.62.0.0-150200.3.18.3Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-invokerrpmleap 15.63.3.0-150200.3.7.5Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-invoker-pluginrpmleap 15.63.8.1-150200.3.6.2Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-javadoc-pluginrpmleap 15.63.11.1-150200.4.21.2Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-javadoc-plugin-bootstraprpmleap 15.63.11.1-150200.4.21.2Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-parentrpmleap 15.643-150200.3.8.2Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-plugin-pluginrpmleap 15.63.15.1-150200.3.15.2Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-plugin-plugin-bootstraprpmleap 15.63.15.1-150200.3.15.2Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-plugin-toolsrpmleap 15.63.15.1-150200.3.15.12Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-reporting-apirpmleap 15.64.0.0-150200.3.10.12Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-reporting-implrpmleap 15.64.0.0-150200.4.9.12Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-surefirerpmleap 15.63.5.2-150200.3.9.20.12Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-surefire-pluginsrpmleap 15.63.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Opensusemaven-surefire-provider-junit5rpmleap 15.63.5.2-150200.3.9.20.2Not reportedSUSE-SU-2025:0719-1Not reported
Opensuseplexus-velocityrpmleap 15.62.1.0-150200.3.10.3Not reportedSUSE-SU-2025:0719-1Not reported
Opensusevelocity-engine-corerpmleap 15.62.4-150200.5.3.3Not reportedSUSE-SU-2025:0719-1Not reported
Susevelocityrpmlinux enterprise module for development tools 15 sp21.7-3.3.1Not reportedSUSE-SU-2021:0800-1Not reported
Susesnakeyamlrpmmanager server module 4.11.31-150200.12.6.1Not reportedSUSE-SU-2022:3560-1Not reported
Opensusevelocityrpmleap 15.21.7-lp152.5.3.1Not reportedOPENSUSE-SU-2021:0447-1Not reported

[Debian bug #985220]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [velocity-demo]Unknown

    Source package: [velocity]

    Details (1)

    • 1.7-15.8 · noarch · tumbleweed

      Unknown · Fixed: 1.7-9.3

      Version impact unknown

      dsa · velocity · opensuse · tumbleweed

  • [velocity-javadoc]Unknown

    Source package: [velocity]

    Details (1)

    • 1.7-15.8 · noarch · tumbleweed

      Unknown · Fixed: 1.7-9.3

      Version impact unknown

      dsa · velocity · opensuse · tumbleweed

  • [velocity-manual]Unknown

    Source package: [velocity]

    Details (1)

    • 1.7-15.8 · noarch · tumbleweed

      Unknown · Fixed: 1.7-9.3

      Version impact unknown

      dsa · velocity · opensuse · tumbleweed

  • [velocity]Fixed

    Source package: [velocity]

    Details (1)

    • 1.7-15.8 · noarch · tumbleweed

      Fixed · Fixed: 1.7-9.3

      dsa · velocity · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • [velocity]Fixed
    Details (2)

    • 1.7-6 · all · bookworm

      Fixed · Fixed: 1.7-6

      dsa · velocity · debian · bookworm; dsa · velocity · debian · 12

    • 1.7-6 · all · bookworm

      Fixed · Fixed: 1.7-6

      dsa · velocity · debian · bookworm; dsa · velocity · debian · 12

  • [velocity-doc]Fixed

    Source package: [velocity]

    Details (2)

    • 1.7-6 · all · bookworm

      Fixed · Fixed: 1.7-6

      dsa · velocity · debian · bookworm; dsa · velocity · debian · 12

    • 1.7-6 · all · bookworm

      Fixed · Fixed: 1.7-6

      dsa · velocity · debian · bookworm; dsa · velocity · debian · 12

[Debian 13 (Trixie)]

  • [velocity]Fixed
    Details (2)

    • 1.7-7 · all · trixie

      Fixed · Fixed: 1.7-6

      dsa · velocity · debian · 13

    • 1.7-7 · all · trixie

      Fixed · Fixed: 1.7-6

      dsa · velocity · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]