NVD Vulnerability Detail

CVE-2015-3253

Summary	The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.
Publication Date	Aug. 13, 2015, 11:59 p.m.
Registration Date	Jan. 26, 2021, 2:49 p.m.
Last Update	Nov. 21, 2024, 11:29 a.m.

CVSS3.0 : CRITICAL
スコア	9.8
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高

CVSS2.0 : HIGH
Score	7.5
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:apache:groovy:1.7.1:::::::*
cpe:2.3:a:apache:groovy:2.2.1:::::::*
cpe:2.3:a:apache:groovy:1.8.4:::::::*
cpe:2.3:a:apache:groovy:2.1.6:::::::*
cpe:2.3:a:apache:groovy:2.3.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.3.10:::::::*
cpe:2.3:a:apache:groovy:2.0.3:::::::*
cpe:2.3:a:apache:groovy:2.1.9:::::::*
cpe:2.3:a:apache:groovy:2.4.3:::::::*
cpe:2.3:a:apache:groovy:2.0.4:::::::*
cpe:2.3:a:apache:groovy:2.0.0:beta_2::::::
cpe:2.3:a:apache:groovy:1.8.9:::::::*
cpe:2.3:a:apache:groovy:2.0.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.1.3:::::::*
cpe:2.3:a:apache:groovy:2.3.2:::::::*
cpe:2.3:a:apache:groovy:2.3.0:rc3::::::
cpe:2.3:a:apache:groovy:2.1.5:::::::*
cpe:2.3:a:apache:groovy:2.4.2:::::::*
cpe:2.3:a:apache:groovy:2.3.5:::::::*
cpe:2.3:a:apache:groovy:2.3.0:rc1::::::
cpe:2.3:a:apache:groovy:2.4.1:::::::*
cpe:2.3:a:apache:groovy:2.2.0:beta_1::::::
cpe:2.3:a:apache:groovy:1.8.5:::::::*
cpe:2.3:a:apache:groovy:2.3.9:::::::*
cpe:2.3:a:apache:groovy:2.3.4:::::::*
cpe:2.3:a:apache:groovy:1.8.0:rc3::::::
cpe:2.3:a:apache:groovy:2.4.0:rc2::::::
cpe:2.3:a:apache:groovy:2.0.0:rc4::::::
cpe:2.3:a:apache:groovy:1.8.2:::::::*
cpe:2.3:a:apache:groovy:1.8.0:beta_1::::::
cpe:2.3:a:apache:groovy:1.7.7:::::::*
cpe:2.3:a:apache:groovy:2.3.1:::::::*
cpe:2.3:a:apache:groovy:2.1.0:::::::*
cpe:2.3:a:apache:groovy:1.8.0:rc4::::::
cpe:2.3:a:apache:groovy:1.9.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.3.0:rc2::::::
cpe:2.3:a:apache:groovy:1.7.0:rc1::::::
cpe:2.3:a:apache:groovy:2.1.8:::::::*
cpe:2.3:a:apache:groovy:1.9.0:beta_3::::::
cpe:2.3:a:apache:groovy:1.8.0:rc2::::::
cpe:2.3:a:apache:groovy:2.4.0:beta_1::::::
cpe:2.3:a:apache:groovy:1.8.0:beta_4::::::
cpe:2.3:a:apache:groovy:1.7.6:::::::*
cpe:2.3:a:apache:groovy:2.3.7:::::::*
cpe:2.3:a:apache:groovy:2.4.0:beta_3::::::
cpe:2.3:a:apache:groovy:1.8.3:::::::*
cpe:2.3:a:apache:groovy:2.0.0:rc2::::::
cpe:2.3:a:apache:groovy:1.8.6:::::::*
cpe:2.3:a:apache:groovy:2.4.0:rc1::::::
cpe:2.3:a:apache:groovy:1.7.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.0.5:::::::*
cpe:2.3:a:apache:groovy:2.1.0:rc3::::::
cpe:2.3:a:apache:groovy:2.0.8:::::::*
cpe:2.3:a:apache:groovy:1.8.0:::::::*
cpe:2.3:a:apache:groovy:2.2.2:::::::*
cpe:2.3:a:apache:groovy:2.1.0:rc2::::::
cpe:2.3:a:apache:groovy:1.9.0:::::::*
cpe:2.3:a:apache:groovy:2.2.0:rc1::::::
cpe:2.3:a:apache:groovy:1.8.0:beta_3::::::
cpe:2.3:a:apache:groovy:2.3.8:::::::*
cpe:2.3:a:apache:groovy:1.9.0:beta_4::::::
cpe:2.3:a:apache:groovy:2.2.0:rc2::::::
cpe:2.3:a:apache:groovy:2.0.0:::::::*
cpe:2.3:a:apache:groovy:1.7.8:::::::*
cpe:2.3:a:apache:groovy:2.1.0:rc1::::::
cpe:2.3:a:apache:groovy:1.8.1:::::::*
cpe:2.3:a:apache:groovy:1.7.4:::::::*
cpe:2.3:a:apache:groovy:2.0.2:::::::*
cpe:2.3:a:apache:groovy:2.2.0:rc3::::::
cpe:2.3:a:apache:groovy:2.2.0:::::::*
cpe:2.3:a:apache:groovy:1.7.9:::::::*
cpe:2.3:a:apache:groovy:1.7.2:::::::*
cpe:2.3:a:apache:groovy:2.0.0:rc1::::::
cpe:2.3:a:apache:groovy:1.7.3:::::::*
cpe:2.3:a:apache:groovy:2.3.0:beta_2::::::
cpe:2.3:a:apache:groovy:2.0.7:::::::*
cpe:2.3:a:apache:groovy:1.7.0:beta_2::::::
cpe:2.3:a:apache:groovy:2.4.0:beta_4::::::
cpe:2.3:a:apache:groovy:2.1.2:::::::*
cpe:2.3:a:apache:groovy:1.8.0:rc1::::::
cpe:2.3:a:apache:groovy:2.0.0:rc3::::::
cpe:2.3:a:apache:groovy:1.8.7:::::::*
cpe:2.3:a:apache:groovy:2.4.0:::::::*
cpe:2.3:a:apache:groovy:2.3.3:::::::*
cpe:2.3:a:apache:groovy:2.3.11:::::::*
cpe:2.3:a:apache:groovy:1.7.11:::::::*
cpe:2.3:a:apache:groovy:2.0.1:::::::*
cpe:2.3:a:apache:groovy:2.1.1:::::::*
cpe:2.3:a:apache:groovy:1.7.0:rc2::::::
cpe:2.3:a:apache:groovy:1.8.8:::::::*
cpe:2.3:a:apache:groovy:2.1.7:::::::*
cpe:2.3:a:apache:groovy:2.0.6:::::::*
cpe:2.3:a:apache:groovy:2.3.6:::::::*
cpe:2.3:a:apache:groovy:2.4.0:beta_2::::::
cpe:2.3:a:apache:groovy:1.7.10:::::::*
cpe:2.3:a:apache:groovy:1.8.0:beta_2::::::
cpe:2.3:a:apache:groovy:2.3.0:::::::*
cpe:2.3:a:apache:groovy:2.1.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.0.0:beta_3::::::
cpe:2.3:a:apache:groovy:1.7.5:::::::*
cpe:2.3:a:apache:groovy:2.1.4:::::::*
cpe:2.3:a:apache:groovy:2.2.0:beta_2::::::
cpe:2.3:a:apache:groovy:1.7.0:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:oracle:retail_store_inventory_management:13.2:::::::*
cpe:2.3:a:oracle:health_sciences_clinical_development_center:3.1.2:::::::*
cpe:2.3:a:oracle:retail_service_backbone:13.0:::::::*
cpe:2.3:a:oracle:retail_service_backbone:14.1:::::::*
cpe:2.3:a:oracle:retail_service_backbone:13.2:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:5.1:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:4.1:::::::*
cpe:2.3:a:oracle:retail_store_inventory_management:14.1:::::::*
cpe:2.3:a:oracle:health_sciences_clinical_development_center:3.1.1:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:15.0:::::::*
cpe:2.3:a:oracle:retail_store_inventory_management:14.0:::::::*
cpe:2.3:a:oracle:retail_service_backbone:14.0:::::::*
cpe:2.3:a:oracle:retail_service_backbone:13.1:::::::*
cpe:2.3:a:oracle:retail_service_backbone:15.0:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:5.2:::::::*

Configuration3	or higher	or less	more than	less than
cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:::::::*
cpe:2.3:a:oracle:webcenter_sites:12.2.1:::::::*

Related information, measures and tools

No	URL	タグ
1	http://groovy-lang.org/security.html	Vendor Advisory
2	http://groovy-lang.org/security.html	Vendor Advisory
3	http://packetstormsecurity.com/files/132714/Apache-Groovy-2.4.3-Code-Execution.html	Mitigation Third Party Advisory VDB Entry
4	http://packetstormsecurity.com/files/132714/Apache-Groovy-2.4.3-Code-Execution.html	Mitigation Third Party Advisory VDB Entry
5	http://rhn.redhat.com/errata/RHSA-2016-0066.html
6	http://rhn.redhat.com/errata/RHSA-2016-0066.html
7	http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html	Patch Third Party Advisory
8	http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html	Patch Third Party Advisory
9	http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
10	http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
11	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	Patch Third Party Advisory
12	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	Patch Third Party Advisory
13	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
14	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
15	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
16	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
17	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
18	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
19	http://www.securityfocus.com/archive/1/536012/100/0/threaded
20	http://www.securityfocus.com/archive/1/536012/100/0/threaded
21	http://www.securityfocus.com/bid/75919	Third Party Advisory VDB Entry
22	http://www.securityfocus.com/bid/75919	Third Party Advisory VDB Entry
23	http://www.securityfocus.com/bid/91787	Third Party Advisory VDB Entry
24	http://www.securityfocus.com/bid/91787	Third Party Advisory VDB Entry
25	http://www.securitytracker.com/id/1034815
26	http://www.securitytracker.com/id/1034815
27	http://www.zerodayinitiative.com/advisories/ZDI-15-365/	Third Party Advisory VDB Entry
28	http://www.zerodayinitiative.com/advisories/ZDI-15-365/	Third Party Advisory VDB Entry
29	https://access.redhat.com/errata/RHSA-2016:1376
30	https://access.redhat.com/errata/RHSA-2016:1376
31	https://access.redhat.com/errata/RHSA-2017:2486
32	https://access.redhat.com/errata/RHSA-2017:2486
33	https://access.redhat.com/errata/RHSA-2017:2596
34	https://access.redhat.com/errata/RHSA-2017:2596
35	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755
36	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755
37	https://lists.apache.org/thread.html/rbb8e16cc5acab183124572b655bdf5fe1d5b5f477dc267352426c7ed%40%3Cnotifications.shardingsphere.apache.org%3E
38	https://lists.apache.org/thread.html/rbb8e16cc5acab183124572b655bdf5fe1d5b5f477dc267352426c7ed%40%3Cnotifications.shardingsphere.apache.org%3E
39	https://security.gentoo.org/glsa/201610-01
40	https://security.gentoo.org/glsa/201610-01
41	https://security.netapp.com/advisory/ntap-20160623-0001/
42	https://security.netapp.com/advisory/ntap-20160623-0001/
43	https://www.oracle.com/security-alerts/cpuapr2020.html
44	https://www.oracle.com/security-alerts/cpuapr2020.html
45	https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
46	https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-74	インジェクション	https://cwe.mitre.org/data/definitions/74.html

JVN Vulnerability Information

Apache Groovy の runtime/MethodClosure.java の MethodClosure クラスにおける任意のコードを実行される脆弱性

Title	Apache Groovy の runtime/MethodClosure.java の MethodClosure クラスにおける任意のコードを実行される脆弱性
Summary	Apache Groovy の runtime/MethodClosure.java の MethodClosure クラスには、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態にされる脆弱性が存在します。補足情報 : CWE による脆弱性タイプは、CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (インジェクション) と識別されています。 http://cwe.mitre.org/data/definitions/74.html
Possible impacts	第三者により、巧妙に細工されたシリアル化されたオブジェクトを介して、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	July 16, 2015, midnight
Registration Date	Aug. 14, 2015, 11:16 a.m.
Last Update	Nov. 22, 2016, 4:01 p.m.

Affected System

Apache Software Foundation

Apache Groovy 1.7.0 から 2.4.3

オラクル

Agile Product Lifecycle Management 9.3.4

Agile Product Lifecycle Management 9.3.5

Oracle Commerce Platform 10.0.3.5

Oracle Commerce Platform 10.2.0.5

Oracle Commerce Platform 11.2.0.1

Oracle Fusion Middleware の Oracle Big Data Discovery 1.1.1

Oracle Fusion Middleware の Oracle Big Data Discovery 1.1.3

Oracle Fusion Middleware の Oracle Big Data Discovery 1.2.0

Oracle Health Sciences Clinical Development Center 3.1.1.x

Oracle Health Sciences Clinical Development Center 3.1.2.x

Oracle Retail Applications の Oracle Retail Customer Insights 15.0

Oracle Retail Applications の Oracle Retail Merchandising Insights 15.0

Oracle Retail Applications の Oracle Retail Order Broker 15.0

Oracle Retail Applications の Oracle Retail Order Broker 4.1

Oracle Retail Applications の Oracle Retail Order Broker 5.1

Oracle Retail Applications の Oracle Retail Order Broker 5.2

Oracle Retail Service Backbone 13.0

Oracle Retail Service Backbone 13.1

Oracle Retail Service Backbone 13.2

Oracle Retail Service Backbone 14.0

Oracle Retail Service Backbone 14.1

Oracle Retail Service Backbone 15.0

Oracle Retail Store Inventory Management 13.2

Oracle Retail Store Inventory Management 14.0

Oracle Retail Store Inventory Management 14.1

Oracle WebCenter Sites 11.1.1.8.0

Oracle WebCenter Sites 12.2.1

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-3253	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3253
National Vulnerability Database (NVD)
2	CVE-2015-3253	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3253

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-Other	https://www.ipa.go.jp/security/vuln/CWE.html#CWEOther

ベンダー情報

No	Name	URL
Groovy
1	Groovy 2.4.x vulnerabilities	http://groovy-lang.org/security.html
HPE Security Bulletin
2	HPSBGN03669	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755
Oracle Critical Patch Update
3	Oracle Critical Patch Update Advisory - April 2016	http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
4	Oracle Critical Patch Update Advisory - July 2016	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
5	Oracle Critical Patch Update Advisory - October 2016	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
6	Oracle Critical Patch Update CVSS V2 Risk Matrices - April 2016	http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html
7	Text Form of Oracle Critical Patch Update - April 2016 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpuapr2016verbose-2881709.html
8	Text Form of Oracle Critical Patch Update - July 2016 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujul2016verbose-2881721.html
9	Text Form of Oracle Critical Patch Update - October 2016 Risk Matrices	http://www.oracle.com/technetwork/security-advisory/cpuoct2016verbose-2881725.html
SECURITY BLOG
10	April 2016 Critical Patch Update Released	https://blogs.oracle.com/security/entry/april_2016_critical_patch_update
11	July 2016 Critical Patch Update Released	https://blogs.oracle.com/security/entry/july_2016_critical_patch_update
12	October 2016 Critical Patch Update Released	https://blogs.oracle.com/security/entry/october_2016_critical_patch_update

その他

No	Name	URL
関連文書
1	Apache Groovy 2.4.3 Code Execution	https://packetstormsecurity.com/files/132714/Apache-Groovy-2.4.3-Code-Execution.html

Change Log

No	Changed Details	Date of change
0	[2015年08月14日] 掲載 [2016年05月31日] CVSS による深刻度：内容を更新影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update CVSS V2 Risk Matrices - April 2016) を追加ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - April 2016) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - April 2016 Risk Matrices) を追加ベンダ情報：オラクル (April 2016 Critical Patch Update Released) を追加 [2016年07月27日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - July 2016) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - July 2016 Risk Matrices) を追加ベンダ情報：オラクル (July 2016 Critical Patch Update Released) を追加 [2016年11月22日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - October 2016) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - October 2016 Risk Matrices) を追加ベンダ情報：オラクル (October 2016 Critical Patch Update Released) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03669) を追加	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:apache:groovy:1.7.1:::::::*
cpe:2.3:a:apache:groovy:2.2.1:::::::*
cpe:2.3:a:apache:groovy:1.8.4:::::::*
cpe:2.3:a:apache:groovy:2.1.6:::::::*
cpe:2.3:a:apache:groovy:2.3.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.3.10:::::::*
cpe:2.3:a:apache:groovy:2.0.3:::::::*
cpe:2.3:a:apache:groovy:2.1.9:::::::*
cpe:2.3:a:apache:groovy:2.4.3:::::::*
cpe:2.3:a:apache:groovy:2.0.4:::::::*
cpe:2.3:a:apache:groovy:2.0.0:beta_2::::::
cpe:2.3:a:apache:groovy:1.8.9:::::::*
cpe:2.3:a:apache:groovy:2.0.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.1.3:::::::*
cpe:2.3:a:apache:groovy:2.3.2:::::::*
cpe:2.3:a:apache:groovy:2.3.0:rc3::::::
cpe:2.3:a:apache:groovy:2.1.5:::::::*
cpe:2.3:a:apache:groovy:2.4.2:::::::*
cpe:2.3:a:apache:groovy:2.3.5:::::::*
cpe:2.3:a:apache:groovy:2.3.0:rc1::::::
cpe:2.3:a:apache:groovy:2.4.1:::::::*
cpe:2.3:a:apache:groovy:2.2.0:beta_1::::::
cpe:2.3:a:apache:groovy:1.8.5:::::::*
cpe:2.3:a:apache:groovy:2.3.9:::::::*
cpe:2.3:a:apache:groovy:2.3.4:::::::*
cpe:2.3:a:apache:groovy:1.8.0:rc3::::::
cpe:2.3:a:apache:groovy:2.4.0:rc2::::::
cpe:2.3:a:apache:groovy:2.0.0:rc4::::::
cpe:2.3:a:apache:groovy:1.8.2:::::::*
cpe:2.3:a:apache:groovy:1.8.0:beta_1::::::
cpe:2.3:a:apache:groovy:1.7.7:::::::*
cpe:2.3:a:apache:groovy:2.3.1:::::::*
cpe:2.3:a:apache:groovy:2.1.0:::::::*
cpe:2.3:a:apache:groovy:1.8.0:rc4::::::
cpe:2.3:a:apache:groovy:1.9.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.3.0:rc2::::::
cpe:2.3:a:apache:groovy:1.7.0:rc1::::::
cpe:2.3:a:apache:groovy:2.1.8:::::::*
cpe:2.3:a:apache:groovy:1.9.0:beta_3::::::
cpe:2.3:a:apache:groovy:1.8.0:rc2::::::
cpe:2.3:a:apache:groovy:2.4.0:beta_1::::::
cpe:2.3:a:apache:groovy:1.8.0:beta_4::::::
cpe:2.3:a:apache:groovy:1.7.6:::::::*
cpe:2.3:a:apache:groovy:2.3.7:::::::*
cpe:2.3:a:apache:groovy:2.4.0:beta_3::::::
cpe:2.3:a:apache:groovy:1.8.3:::::::*
cpe:2.3:a:apache:groovy:2.0.0:rc2::::::
cpe:2.3:a:apache:groovy:1.8.6:::::::*
cpe:2.3:a:apache:groovy:2.4.0:rc1::::::
cpe:2.3:a:apache:groovy:1.7.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.0.5:::::::*
cpe:2.3:a:apache:groovy:2.1.0:rc3::::::
cpe:2.3:a:apache:groovy:2.0.8:::::::*
cpe:2.3:a:apache:groovy:1.8.0:::::::*
cpe:2.3:a:apache:groovy:2.2.2:::::::*
cpe:2.3:a:apache:groovy:2.1.0:rc2::::::
cpe:2.3:a:apache:groovy:1.9.0:::::::*
cpe:2.3:a:apache:groovy:2.2.0:rc1::::::
cpe:2.3:a:apache:groovy:1.8.0:beta_3::::::
cpe:2.3:a:apache:groovy:2.3.8:::::::*
cpe:2.3:a:apache:groovy:1.9.0:beta_4::::::
cpe:2.3:a:apache:groovy:2.2.0:rc2::::::
cpe:2.3:a:apache:groovy:2.0.0:::::::*
cpe:2.3:a:apache:groovy:1.7.8:::::::*
cpe:2.3:a:apache:groovy:2.1.0:rc1::::::
cpe:2.3:a:apache:groovy:1.8.1:::::::*
cpe:2.3:a:apache:groovy:1.7.4:::::::*
cpe:2.3:a:apache:groovy:2.0.2:::::::*
cpe:2.3:a:apache:groovy:2.2.0:rc3::::::
cpe:2.3:a:apache:groovy:2.2.0:::::::*
cpe:2.3:a:apache:groovy:1.7.9:::::::*
cpe:2.3:a:apache:groovy:1.7.2:::::::*
cpe:2.3:a:apache:groovy:2.0.0:rc1::::::
cpe:2.3:a:apache:groovy:1.7.3:::::::*
cpe:2.3:a:apache:groovy:2.3.0:beta_2::::::
cpe:2.3:a:apache:groovy:2.0.7:::::::*
cpe:2.3:a:apache:groovy:1.7.0:beta_2::::::
cpe:2.3:a:apache:groovy:2.4.0:beta_4::::::
cpe:2.3:a:apache:groovy:2.1.2:::::::*
cpe:2.3:a:apache:groovy:1.8.0:rc1::::::
cpe:2.3:a:apache:groovy:2.0.0:rc3::::::
cpe:2.3:a:apache:groovy:1.8.7:::::::*
cpe:2.3:a:apache:groovy:2.4.0:::::::*
cpe:2.3:a:apache:groovy:2.3.3:::::::*
cpe:2.3:a:apache:groovy:2.3.11:::::::*
cpe:2.3:a:apache:groovy:1.7.11:::::::*
cpe:2.3:a:apache:groovy:2.0.1:::::::*
cpe:2.3:a:apache:groovy:2.1.1:::::::*
cpe:2.3:a:apache:groovy:1.7.0:rc2::::::
cpe:2.3:a:apache:groovy:1.8.8:::::::*
cpe:2.3:a:apache:groovy:2.1.7:::::::*
cpe:2.3:a:apache:groovy:2.0.6:::::::*
cpe:2.3:a:apache:groovy:2.3.6:::::::*
cpe:2.3:a:apache:groovy:2.4.0:beta_2::::::
cpe:2.3:a:apache:groovy:1.7.10:::::::*
cpe:2.3:a:apache:groovy:1.8.0:beta_2::::::
cpe:2.3:a:apache:groovy:2.3.0:::::::*
cpe:2.3:a:apache:groovy:2.1.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.0.0:beta_3::::::
cpe:2.3:a:apache:groovy:1.7.5:::::::*
cpe:2.3:a:apache:groovy:2.1.4:::::::*
cpe:2.3:a:apache:groovy:2.2.0:beta_2::::::
cpe:2.3:a:apache:groovy:1.7.0:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:oracle:retail_store_inventory_management:13.2:::::::*
cpe:2.3:a:oracle:health_sciences_clinical_development_center:3.1.2:::::::*
cpe:2.3:a:oracle:retail_service_backbone:13.0:::::::*
cpe:2.3:a:oracle:retail_service_backbone:14.1:::::::*
cpe:2.3:a:oracle:retail_service_backbone:13.2:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:5.1:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:4.1:::::::*
cpe:2.3:a:oracle:retail_store_inventory_management:14.1:::::::*
cpe:2.3:a:oracle:health_sciences_clinical_development_center:3.1.1:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:15.0:::::::*
cpe:2.3:a:oracle:retail_store_inventory_management:14.0:::::::*
cpe:2.3:a:oracle:retail_service_backbone:14.0:::::::*
cpe:2.3:a:oracle:retail_service_backbone:13.1:::::::*
cpe:2.3:a:oracle:retail_service_backbone:15.0:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:5.2:::::::*