NVD脆弱性詳細

CVE-2015-3253

概要	The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.
公表日	2015年8月13日23:59
登録日	2021年1月26日14:49
最終更新日	2024年11月21日11:29

CVSS3.0 : CRITICAL
スコア	9.8
ベクター	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高

CVSS2.0 : HIGH
スコア	7.5
ベクター	AV:N/AC:L/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
全ての特権を取得	いいえ
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:apache:groovy:1.7.1:::::::*
cpe:2.3:a:apache:groovy:2.2.1:::::::*
cpe:2.3:a:apache:groovy:1.8.4:::::::*
cpe:2.3:a:apache:groovy:2.1.6:::::::*
cpe:2.3:a:apache:groovy:2.3.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.3.10:::::::*
cpe:2.3:a:apache:groovy:2.0.3:::::::*
cpe:2.3:a:apache:groovy:2.1.9:::::::*
cpe:2.3:a:apache:groovy:2.4.3:::::::*
cpe:2.3:a:apache:groovy:2.0.4:::::::*
cpe:2.3:a:apache:groovy:2.0.0:beta_2::::::
cpe:2.3:a:apache:groovy:1.8.9:::::::*
cpe:2.3:a:apache:groovy:2.0.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.1.3:::::::*
cpe:2.3:a:apache:groovy:2.3.2:::::::*
cpe:2.3:a:apache:groovy:2.3.0:rc3::::::
cpe:2.3:a:apache:groovy:2.1.5:::::::*
cpe:2.3:a:apache:groovy:2.4.2:::::::*
cpe:2.3:a:apache:groovy:2.3.5:::::::*
cpe:2.3:a:apache:groovy:2.3.0:rc1::::::
cpe:2.3:a:apache:groovy:2.4.1:::::::*
cpe:2.3:a:apache:groovy:2.2.0:beta_1::::::
cpe:2.3:a:apache:groovy:1.8.5:::::::*
cpe:2.3:a:apache:groovy:2.3.9:::::::*
cpe:2.3:a:apache:groovy:2.3.4:::::::*
cpe:2.3:a:apache:groovy:1.8.0:rc3::::::
cpe:2.3:a:apache:groovy:2.4.0:rc2::::::
cpe:2.3:a:apache:groovy:2.0.0:rc4::::::
cpe:2.3:a:apache:groovy:1.8.2:::::::*
cpe:2.3:a:apache:groovy:1.8.0:beta_1::::::
cpe:2.3:a:apache:groovy:1.7.7:::::::*
cpe:2.3:a:apache:groovy:2.3.1:::::::*
cpe:2.3:a:apache:groovy:2.1.0:::::::*
cpe:2.3:a:apache:groovy:1.8.0:rc4::::::
cpe:2.3:a:apache:groovy:1.9.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.3.0:rc2::::::
cpe:2.3:a:apache:groovy:1.7.0:rc1::::::
cpe:2.3:a:apache:groovy:2.1.8:::::::*
cpe:2.3:a:apache:groovy:1.9.0:beta_3::::::
cpe:2.3:a:apache:groovy:1.8.0:rc2::::::
cpe:2.3:a:apache:groovy:2.4.0:beta_1::::::
cpe:2.3:a:apache:groovy:1.8.0:beta_4::::::
cpe:2.3:a:apache:groovy:1.7.6:::::::*
cpe:2.3:a:apache:groovy:2.3.7:::::::*
cpe:2.3:a:apache:groovy:2.4.0:beta_3::::::
cpe:2.3:a:apache:groovy:1.8.3:::::::*
cpe:2.3:a:apache:groovy:2.0.0:rc2::::::
cpe:2.3:a:apache:groovy:1.8.6:::::::*
cpe:2.3:a:apache:groovy:2.4.0:rc1::::::
cpe:2.3:a:apache:groovy:1.7.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.0.5:::::::*
cpe:2.3:a:apache:groovy:2.1.0:rc3::::::
cpe:2.3:a:apache:groovy:2.0.8:::::::*
cpe:2.3:a:apache:groovy:1.8.0:::::::*
cpe:2.3:a:apache:groovy:2.2.2:::::::*
cpe:2.3:a:apache:groovy:2.1.0:rc2::::::
cpe:2.3:a:apache:groovy:1.9.0:::::::*
cpe:2.3:a:apache:groovy:2.2.0:rc1::::::
cpe:2.3:a:apache:groovy:1.8.0:beta_3::::::
cpe:2.3:a:apache:groovy:2.3.8:::::::*
cpe:2.3:a:apache:groovy:1.9.0:beta_4::::::
cpe:2.3:a:apache:groovy:2.2.0:rc2::::::
cpe:2.3:a:apache:groovy:2.0.0:::::::*
cpe:2.3:a:apache:groovy:1.7.8:::::::*
cpe:2.3:a:apache:groovy:2.1.0:rc1::::::
cpe:2.3:a:apache:groovy:1.8.1:::::::*
cpe:2.3:a:apache:groovy:1.7.4:::::::*
cpe:2.3:a:apache:groovy:2.0.2:::::::*
cpe:2.3:a:apache:groovy:2.2.0:rc3::::::
cpe:2.3:a:apache:groovy:2.2.0:::::::*
cpe:2.3:a:apache:groovy:1.7.9:::::::*
cpe:2.3:a:apache:groovy:1.7.2:::::::*
cpe:2.3:a:apache:groovy:2.0.0:rc1::::::
cpe:2.3:a:apache:groovy:1.7.3:::::::*
cpe:2.3:a:apache:groovy:2.3.0:beta_2::::::
cpe:2.3:a:apache:groovy:2.0.7:::::::*
cpe:2.3:a:apache:groovy:1.7.0:beta_2::::::
cpe:2.3:a:apache:groovy:2.4.0:beta_4::::::
cpe:2.3:a:apache:groovy:2.1.2:::::::*
cpe:2.3:a:apache:groovy:1.8.0:rc1::::::
cpe:2.3:a:apache:groovy:2.0.0:rc3::::::
cpe:2.3:a:apache:groovy:1.8.7:::::::*
cpe:2.3:a:apache:groovy:2.4.0:::::::*
cpe:2.3:a:apache:groovy:2.3.3:::::::*
cpe:2.3:a:apache:groovy:2.3.11:::::::*
cpe:2.3:a:apache:groovy:1.7.11:::::::*
cpe:2.3:a:apache:groovy:2.0.1:::::::*
cpe:2.3:a:apache:groovy:2.1.1:::::::*
cpe:2.3:a:apache:groovy:1.7.0:rc2::::::
cpe:2.3:a:apache:groovy:1.8.8:::::::*
cpe:2.3:a:apache:groovy:2.1.7:::::::*
cpe:2.3:a:apache:groovy:2.0.6:::::::*
cpe:2.3:a:apache:groovy:2.3.6:::::::*
cpe:2.3:a:apache:groovy:2.4.0:beta_2::::::
cpe:2.3:a:apache:groovy:1.7.10:::::::*
cpe:2.3:a:apache:groovy:1.8.0:beta_2::::::
cpe:2.3:a:apache:groovy:2.3.0:::::::*
cpe:2.3:a:apache:groovy:2.1.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.0.0:beta_3::::::
cpe:2.3:a:apache:groovy:1.7.5:::::::*
cpe:2.3:a:apache:groovy:2.1.4:::::::*
cpe:2.3:a:apache:groovy:2.2.0:beta_2::::::
cpe:2.3:a:apache:groovy:1.7.0:::::::*

構成2	以上	以下	より上	未満
cpe:2.3:a:oracle:retail_store_inventory_management:13.2:::::::*
cpe:2.3:a:oracle:health_sciences_clinical_development_center:3.1.2:::::::*
cpe:2.3:a:oracle:retail_service_backbone:13.0:::::::*
cpe:2.3:a:oracle:retail_service_backbone:14.1:::::::*
cpe:2.3:a:oracle:retail_service_backbone:13.2:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:5.1:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:4.1:::::::*
cpe:2.3:a:oracle:retail_store_inventory_management:14.1:::::::*
cpe:2.3:a:oracle:health_sciences_clinical_development_center:3.1.1:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:15.0:::::::*
cpe:2.3:a:oracle:retail_store_inventory_management:14.0:::::::*
cpe:2.3:a:oracle:retail_service_backbone:14.0:::::::*
cpe:2.3:a:oracle:retail_service_backbone:13.1:::::::*
cpe:2.3:a:oracle:retail_service_backbone:15.0:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:5.2:::::::*

構成3	以上	以下	より上	未満
cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:::::::*
cpe:2.3:a:oracle:webcenter_sites:12.2.1:::::::*

関連情報、対策とツール

No	URL	タグ
1	http://groovy-lang.org/security.html	Vendor Advisory
2	http://groovy-lang.org/security.html	Vendor Advisory
3	http://packetstormsecurity.com/files/132714/Apache-Groovy-2.4.3-Code-Execution.html	Mitigation Third Party Advisory VDB Entry
4	http://packetstormsecurity.com/files/132714/Apache-Groovy-2.4.3-Code-Execution.html	Mitigation Third Party Advisory VDB Entry
5	http://rhn.redhat.com/errata/RHSA-2016-0066.html
6	http://rhn.redhat.com/errata/RHSA-2016-0066.html
7	http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html	Patch Third Party Advisory
8	http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html	Patch Third Party Advisory
9	http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
10	http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
11	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	Patch Third Party Advisory
12	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	Patch Third Party Advisory
13	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
14	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
15	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
16	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
17	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
18	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
19	http://www.securityfocus.com/archive/1/536012/100/0/threaded
20	http://www.securityfocus.com/archive/1/536012/100/0/threaded
21	http://www.securityfocus.com/bid/75919	Third Party Advisory VDB Entry
22	http://www.securityfocus.com/bid/75919	Third Party Advisory VDB Entry
23	http://www.securityfocus.com/bid/91787	Third Party Advisory VDB Entry
24	http://www.securityfocus.com/bid/91787	Third Party Advisory VDB Entry
25	http://www.securitytracker.com/id/1034815
26	http://www.securitytracker.com/id/1034815
27	http://www.zerodayinitiative.com/advisories/ZDI-15-365/	Third Party Advisory VDB Entry
28	http://www.zerodayinitiative.com/advisories/ZDI-15-365/	Third Party Advisory VDB Entry
29	https://access.redhat.com/errata/RHSA-2016:1376
30	https://access.redhat.com/errata/RHSA-2016:1376
31	https://access.redhat.com/errata/RHSA-2017:2486
32	https://access.redhat.com/errata/RHSA-2017:2486
33	https://access.redhat.com/errata/RHSA-2017:2596
34	https://access.redhat.com/errata/RHSA-2017:2596
35	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755
36	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755
37	https://lists.apache.org/thread.html/rbb8e16cc5acab183124572b655bdf5fe1d5b5f477dc267352426c7ed%40%3Cnotifications.shardingsphere.apache.org%3E
38	https://lists.apache.org/thread.html/rbb8e16cc5acab183124572b655bdf5fe1d5b5f477dc267352426c7ed%40%3Cnotifications.shardingsphere.apache.org%3E
39	https://security.gentoo.org/glsa/201610-01
40	https://security.gentoo.org/glsa/201610-01
41	https://security.netapp.com/advisory/ntap-20160623-0001/
42	https://security.netapp.com/advisory/ntap-20160623-0001/
43	https://www.oracle.com/security-alerts/cpuapr2020.html
44	https://www.oracle.com/security-alerts/cpuapr2020.html
45	https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
46	https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-74	インジェクション	https://cwe.mitre.org/data/definitions/74.html

JVN脆弱性情報

Apache Groovy の runtime/MethodClosure.java の MethodClosure クラスにおける任意のコードを実行される脆弱性

タイトル	Apache Groovy の runtime/MethodClosure.java の MethodClosure クラスにおける任意のコードを実行される脆弱性
概要	Apache Groovy の runtime/MethodClosure.java の MethodClosure クラスには、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態にされる脆弱性が存在します。補足情報 : CWE による脆弱性タイプは、CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (インジェクション) と識別されています。 http://cwe.mitre.org/data/definitions/74.html
想定される影響	第三者により、巧妙に細工されたシリアル化されたオブジェクトを介して、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態にされる可能性があります。
対策	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
公表日	2015年7月16日0:00
登録日	2015年8月14日11:16
最終更新日	2016年11月22日16:01

影響を受けるシステム

Apache Software Foundation

Apache Groovy 1.7.0 から 2.4.3

オラクル

Agile Product Lifecycle Management 9.3.4

Agile Product Lifecycle Management 9.3.5

Oracle Commerce Platform 10.0.3.5

Oracle Commerce Platform 10.2.0.5

Oracle Commerce Platform 11.2.0.1

Oracle Fusion Middleware の Oracle Big Data Discovery 1.1.1

Oracle Fusion Middleware の Oracle Big Data Discovery 1.1.3

Oracle Fusion Middleware の Oracle Big Data Discovery 1.2.0

Oracle Health Sciences Clinical Development Center 3.1.1.x

Oracle Health Sciences Clinical Development Center 3.1.2.x

Oracle Retail Applications の Oracle Retail Customer Insights 15.0

Oracle Retail Applications の Oracle Retail Merchandising Insights 15.0

Oracle Retail Applications の Oracle Retail Order Broker 15.0

Oracle Retail Applications の Oracle Retail Order Broker 4.1

Oracle Retail Applications の Oracle Retail Order Broker 5.1

Oracle Retail Applications の Oracle Retail Order Broker 5.2

Oracle Retail Service Backbone 13.0

Oracle Retail Service Backbone 13.1

Oracle Retail Service Backbone 13.2

Oracle Retail Service Backbone 14.0

Oracle Retail Service Backbone 14.1

Oracle Retail Service Backbone 15.0

Oracle Retail Store Inventory Management 13.2

Oracle Retail Store Inventory Management 14.0

Oracle Retail Store Inventory Management 14.1

Oracle WebCenter Sites 11.1.1.8.0

Oracle WebCenter Sites 12.2.1

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-3253	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3253
National Vulnerability Database (NVD)
2	CVE-2015-3253	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3253

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-Other	https://www.ipa.go.jp/security/vuln/CWE.html#CWEOther

ベンダー情報

No	名前	URL
Groovy
1	Groovy 2.4.x vulnerabilities	http://groovy-lang.org/security.html
HPE Security Bulletin
2	HPSBGN03669	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755
Oracle Critical Patch Update
3	Oracle Critical Patch Update Advisory - April 2016	http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
4	Oracle Critical Patch Update Advisory - July 2016	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
5	Oracle Critical Patch Update Advisory - October 2016	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
6	Oracle Critical Patch Update CVSS V2 Risk Matrices - April 2016	http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html
7	Text Form of Oracle Critical Patch Update - April 2016 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpuapr2016verbose-2881709.html
8	Text Form of Oracle Critical Patch Update - July 2016 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujul2016verbose-2881721.html
9	Text Form of Oracle Critical Patch Update - October 2016 Risk Matrices	http://www.oracle.com/technetwork/security-advisory/cpuoct2016verbose-2881725.html
SECURITY BLOG
10	April 2016 Critical Patch Update Released	https://blogs.oracle.com/security/entry/april_2016_critical_patch_update
11	July 2016 Critical Patch Update Released	https://blogs.oracle.com/security/entry/july_2016_critical_patch_update
12	October 2016 Critical Patch Update Released	https://blogs.oracle.com/security/entry/october_2016_critical_patch_update

その他

No	名前	URL
関連文書
1	Apache Groovy 2.4.3 Code Execution	https://packetstormsecurity.com/files/132714/Apache-Groovy-2.4.3-Code-Execution.html

変更履歴

No	変更内容	変更日
0	[2015年08月14日] 掲載 [2016年05月31日] CVSS による深刻度：内容を更新影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update CVSS V2 Risk Matrices - April 2016) を追加ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - April 2016) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - April 2016 Risk Matrices) を追加ベンダ情報：オラクル (April 2016 Critical Patch Update Released) を追加 [2016年07月27日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - July 2016) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - July 2016 Risk Matrices) を追加ベンダ情報：オラクル (July 2016 Critical Patch Update Released) を追加 [2016年11月22日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - October 2016) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - October 2016 Risk Matrices) を追加ベンダ情報：オラクル (October 2016 Critical Patch Update Released) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03669) を追加	2018年2月17日10:37

構成1	以上	以下	より上	未満
cpe:2.3:a:apache:groovy:1.7.1:::::::*
cpe:2.3:a:apache:groovy:2.2.1:::::::*
cpe:2.3:a:apache:groovy:1.8.4:::::::*
cpe:2.3:a:apache:groovy:2.1.6:::::::*
cpe:2.3:a:apache:groovy:2.3.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.3.10:::::::*
cpe:2.3:a:apache:groovy:2.0.3:::::::*
cpe:2.3:a:apache:groovy:2.1.9:::::::*
cpe:2.3:a:apache:groovy:2.4.3:::::::*
cpe:2.3:a:apache:groovy:2.0.4:::::::*
cpe:2.3:a:apache:groovy:2.0.0:beta_2::::::
cpe:2.3:a:apache:groovy:1.8.9:::::::*
cpe:2.3:a:apache:groovy:2.0.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.1.3:::::::*
cpe:2.3:a:apache:groovy:2.3.2:::::::*
cpe:2.3:a:apache:groovy:2.3.0:rc3::::::
cpe:2.3:a:apache:groovy:2.1.5:::::::*
cpe:2.3:a:apache:groovy:2.4.2:::::::*
cpe:2.3:a:apache:groovy:2.3.5:::::::*
cpe:2.3:a:apache:groovy:2.3.0:rc1::::::
cpe:2.3:a:apache:groovy:2.4.1:::::::*
cpe:2.3:a:apache:groovy:2.2.0:beta_1::::::
cpe:2.3:a:apache:groovy:1.8.5:::::::*
cpe:2.3:a:apache:groovy:2.3.9:::::::*
cpe:2.3:a:apache:groovy:2.3.4:::::::*
cpe:2.3:a:apache:groovy:1.8.0:rc3::::::
cpe:2.3:a:apache:groovy:2.4.0:rc2::::::
cpe:2.3:a:apache:groovy:2.0.0:rc4::::::
cpe:2.3:a:apache:groovy:1.8.2:::::::*
cpe:2.3:a:apache:groovy:1.8.0:beta_1::::::
cpe:2.3:a:apache:groovy:1.7.7:::::::*
cpe:2.3:a:apache:groovy:2.3.1:::::::*
cpe:2.3:a:apache:groovy:2.1.0:::::::*
cpe:2.3:a:apache:groovy:1.8.0:rc4::::::
cpe:2.3:a:apache:groovy:1.9.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.3.0:rc2::::::
cpe:2.3:a:apache:groovy:1.7.0:rc1::::::
cpe:2.3:a:apache:groovy:2.1.8:::::::*
cpe:2.3:a:apache:groovy:1.9.0:beta_3::::::
cpe:2.3:a:apache:groovy:1.8.0:rc2::::::
cpe:2.3:a:apache:groovy:2.4.0:beta_1::::::
cpe:2.3:a:apache:groovy:1.8.0:beta_4::::::
cpe:2.3:a:apache:groovy:1.7.6:::::::*
cpe:2.3:a:apache:groovy:2.3.7:::::::*
cpe:2.3:a:apache:groovy:2.4.0:beta_3::::::
cpe:2.3:a:apache:groovy:1.8.3:::::::*
cpe:2.3:a:apache:groovy:2.0.0:rc2::::::
cpe:2.3:a:apache:groovy:1.8.6:::::::*
cpe:2.3:a:apache:groovy:2.4.0:rc1::::::
cpe:2.3:a:apache:groovy:1.7.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.0.5:::::::*
cpe:2.3:a:apache:groovy:2.1.0:rc3::::::
cpe:2.3:a:apache:groovy:2.0.8:::::::*
cpe:2.3:a:apache:groovy:1.8.0:::::::*
cpe:2.3:a:apache:groovy:2.2.2:::::::*
cpe:2.3:a:apache:groovy:2.1.0:rc2::::::
cpe:2.3:a:apache:groovy:1.9.0:::::::*
cpe:2.3:a:apache:groovy:2.2.0:rc1::::::
cpe:2.3:a:apache:groovy:1.8.0:beta_3::::::
cpe:2.3:a:apache:groovy:2.3.8:::::::*
cpe:2.3:a:apache:groovy:1.9.0:beta_4::::::
cpe:2.3:a:apache:groovy:2.2.0:rc2::::::
cpe:2.3:a:apache:groovy:2.0.0:::::::*
cpe:2.3:a:apache:groovy:1.7.8:::::::*
cpe:2.3:a:apache:groovy:2.1.0:rc1::::::
cpe:2.3:a:apache:groovy:1.8.1:::::::*
cpe:2.3:a:apache:groovy:1.7.4:::::::*
cpe:2.3:a:apache:groovy:2.0.2:::::::*
cpe:2.3:a:apache:groovy:2.2.0:rc3::::::
cpe:2.3:a:apache:groovy:2.2.0:::::::*
cpe:2.3:a:apache:groovy:1.7.9:::::::*
cpe:2.3:a:apache:groovy:1.7.2:::::::*
cpe:2.3:a:apache:groovy:2.0.0:rc1::::::
cpe:2.3:a:apache:groovy:1.7.3:::::::*
cpe:2.3:a:apache:groovy:2.3.0:beta_2::::::
cpe:2.3:a:apache:groovy:2.0.7:::::::*
cpe:2.3:a:apache:groovy:1.7.0:beta_2::::::
cpe:2.3:a:apache:groovy:2.4.0:beta_4::::::
cpe:2.3:a:apache:groovy:2.1.2:::::::*
cpe:2.3:a:apache:groovy:1.8.0:rc1::::::
cpe:2.3:a:apache:groovy:2.0.0:rc3::::::
cpe:2.3:a:apache:groovy:1.8.7:::::::*
cpe:2.3:a:apache:groovy:2.4.0:::::::*
cpe:2.3:a:apache:groovy:2.3.3:::::::*
cpe:2.3:a:apache:groovy:2.3.11:::::::*
cpe:2.3:a:apache:groovy:1.7.11:::::::*
cpe:2.3:a:apache:groovy:2.0.1:::::::*
cpe:2.3:a:apache:groovy:2.1.1:::::::*
cpe:2.3:a:apache:groovy:1.7.0:rc2::::::
cpe:2.3:a:apache:groovy:1.8.8:::::::*
cpe:2.3:a:apache:groovy:2.1.7:::::::*
cpe:2.3:a:apache:groovy:2.0.6:::::::*
cpe:2.3:a:apache:groovy:2.3.6:::::::*
cpe:2.3:a:apache:groovy:2.4.0:beta_2::::::
cpe:2.3:a:apache:groovy:1.7.10:::::::*
cpe:2.3:a:apache:groovy:1.8.0:beta_2::::::
cpe:2.3:a:apache:groovy:2.3.0:::::::*
cpe:2.3:a:apache:groovy:2.1.0:beta_1::::::
cpe:2.3:a:apache:groovy:2.0.0:beta_3::::::
cpe:2.3:a:apache:groovy:1.7.5:::::::*
cpe:2.3:a:apache:groovy:2.1.4:::::::*
cpe:2.3:a:apache:groovy:2.2.0:beta_2::::::
cpe:2.3:a:apache:groovy:1.7.0:::::::*

構成2	以上	以下	より上	未満
cpe:2.3:a:oracle:retail_store_inventory_management:13.2:::::::*
cpe:2.3:a:oracle:health_sciences_clinical_development_center:3.1.2:::::::*
cpe:2.3:a:oracle:retail_service_backbone:13.0:::::::*
cpe:2.3:a:oracle:retail_service_backbone:14.1:::::::*
cpe:2.3:a:oracle:retail_service_backbone:13.2:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:5.1:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:4.1:::::::*
cpe:2.3:a:oracle:retail_store_inventory_management:14.1:::::::*
cpe:2.3:a:oracle:health_sciences_clinical_development_center:3.1.1:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:15.0:::::::*
cpe:2.3:a:oracle:retail_store_inventory_management:14.0:::::::*
cpe:2.3:a:oracle:retail_service_backbone:14.0:::::::*
cpe:2.3:a:oracle:retail_service_backbone:13.1:::::::*
cpe:2.3:a:oracle:retail_service_backbone:15.0:::::::*
cpe:2.3:a:oracle:retail_order_broker_cloud_service:5.2:::::::*