VulnSocial

CVE-2020-8203(lodash / banking_corporate_lending_process_management)

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

lodash CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-770CWE-1321

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • banking_corporate_lending_process_management
  • banking_credit_facilities_process_management
  • banking_extensibility_workbench
  • banking_liquidity_management

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
lodashoracle
Products
banking_corporate_lending_process_managementbanking_credit_facilities_process_managementbanking_extensibility_workbenchbanking_liquidity_managementbanking_supply_chain_financebanking_trade_finance_process_managementbanking_virtual_account_managementblockchain_platformcommunications_billing_and_revenue_managementcommunications_cloud_native_core_policy

15 versions affected across 18 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-02: 111-02
Referenced assets3 URLs
Full discourse1 post
  • Nathan Burg@NathanBurg

    The GitHits research tool now cites package vulnerabilities directly. Ask "Which lodash version fixes CVE-2020-8203?" in the CLI, the MCP server, or public Research on the GitHits Index, and you get 4.17.19, cited straight from http://osv.dev. Packages also get their own public vulnerability page: http://index.githits.dev/vulnerabilities/packages/npm/lodash/

    12040253
    146 followersView on X
CPE platform detail39 entries

39 of 39 entries

PartVendorProductVersionTarget SWTarget HW
Applodashlodash-node.js-
Apporaclebanking_corporate_lending_process_management14.2.0--
Apporaclebanking_corporate_lending_process_management14.3.0--
Apporaclebanking_corporate_lending_process_management14.5.0--
Apporaclebanking_credit_facilities_process_management14.2.0--
Apporaclebanking_credit_facilities_process_management14.3.0--
Apporaclebanking_credit_facilities_process_management14.5.0--
Apporaclebanking_extensibility_workbench14.2.0--
Apporaclebanking_extensibility_workbench14.3.0--
Apporaclebanking_extensibility_workbench14.5.0--
Apporaclebanking_liquidity_management14.2.0--
Apporaclebanking_liquidity_management14.3.0--
Apporaclebanking_liquidity_management14.5.0--
Apporaclebanking_supply_chain_finance14.2.0--
Apporaclebanking_supply_chain_finance14.3.0--
Apporaclebanking_supply_chain_finance14.5.0--
Apporaclebanking_trade_finance_process_management14.2.0--
Apporaclebanking_trade_finance_process_management14.3.0--
Apporaclebanking_trade_finance_process_management14.5.0--
Apporaclebanking_virtual_account_management14.2.0--
Apporaclebanking_virtual_account_management14.3.0--
Apporaclebanking_virtual_account_management14.5.0--
Apporacleblockchain_platform---
Apporaclecommunications_billing_and_revenue_management12.0.0.3.0--
Apporaclecommunications_billing_and_revenue_management7.5.0.23.0--
Apporaclecommunications_cloud_native_core_policy1.11.0--
Apporaclecommunications_session_border_controller8.4--
Apporaclecommunications_session_border_controller9.0--
Apporaclecommunications_session_border_controllercz8.4--
Apporaclecommunications_session_routercz8.4--
Apporaclecommunications_subscriber-aware_load_balancercz8.3--
Apporaclecommunications_subscriber-aware_load_balancercz8.4--
Apporacleenterprise_communications_broker3.2.0--
Apporacleenterprise_communications_broker3.3.0--
Apporacleenterprise_communications_brokerpcz3.3--
Apporaclejd_edwards_enterpriseone_tools---
Apporaclepeoplesoft_enterprise_peopletools8.58--
Apporaclepeoplesoft_enterprise_peopletools8.59--
Apporacleprimavera_gateway---

Explore more

Back to dashboardlodash CVEsoracle CVEsbanking_corporate_lending_process_management vulnerabilities