CVE-2020-13936: Velocity Sandbox Bypass
First published: Tue Mar 09 2021(Updated: )
Apache Velocity could allow a remote attacker to execute arbitrary code on the system, caused by a sandbox bypass flaw. By modifying the Velocity templates, an attacker could exploit this vulnerability to execute arbitrary code with the same privileges as the account running the Servlet container.
Credit: security@apache.org security@apache.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ubuntu/velocity | <1.7-5ubuntu0.18.04.1~ | 1.7-5ubuntu0.18.04.1~ |
| ubuntu/velocity | <1.7-5+ | 1.7-5+ |
| ubuntu/velocity | <1.7-4ubuntu0.1~ | 1.7-4ubuntu0.1~ |
| debian/velocity | 1.7-5+deb10u1 1.7-6 | |
| redhat/eap7-artemis-wildfly-integration | <0:1.0.4-1.redhat_00001.1.el6ea | 0:1.0.4-1.redhat_00001.1.el6ea |
| redhat/eap7-bouncycastle | <0:1.68.0-2.redhat_00005.1.el6ea | 0:1.68.0-2.redhat_00005.1.el6ea |
| redhat/eap7-hal-console | <0:3.2.14-1.Final_redhat_00001.1.el6ea | 0:3.2.14-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-infinispan | <0:9.4.22-3.Final_redhat_00001.1.el6ea | 0:9.4.22-3.Final_redhat_00001.1.el6ea |
| redhat/eap7-ironjacamar | <0:1.4.30-1.Final_redhat_00001.1.el6ea | 0:1.4.30-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-jboss-genericjms | <0:2.0.9-1.Final_redhat_00001.1.el6ea | 0:2.0.9-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-jboss-marshalling | <0:2.0.11-1.Final_redhat_00001.1.el6ea | 0:2.0.11-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-jboss-server-migration | <0:1.7.2-6.Final_redhat_00007.1.el6ea | 0:1.7.2-6.Final_redhat_00007.1.el6ea |
| redhat/eap7-jboss-weld | <3.1-api-0:3.1.0-6.SP3_redhat_00001.1.el6ea | 3.1-api-0:3.1.0-6.SP3_redhat_00001.1.el6ea |
| redhat/eap7-jgroups-kubernetes | <0:1.0.16-1.Final_redhat_00001.1.el6ea | 0:1.0.16-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-netty | <0:4.1.60-1.Final_redhat_00001.1.el6ea | 0:4.1.60-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-resteasy | <0:3.11.4-1.Final_redhat_00001.1.el6ea | 0:3.11.4-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-undertow | <0:2.0.35-1.SP1_redhat_00001.1.el6ea | 0:2.0.35-1.SP1_redhat_00001.1.el6ea |
| redhat/eap7-velocity | <0:2.3.0-1.redhat_00001.1.el6ea | 0:2.3.0-1.redhat_00001.1.el6ea |
| redhat/eap7-weld-core | <0:3.1.6-1.Final_redhat_00001.1.el6ea | 0:3.1.6-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-wildfly | <0:7.3.7-1.GA_redhat_00002.1.el6ea | 0:7.3.7-1.GA_redhat_00002.1.el6ea |
| redhat/eap7-wildfly-elytron | <0:1.10.12-1.Final_redhat_00001.1.el6ea | 0:1.10.12-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-wildfly-http-client | <0:1.0.26-1.Final_redhat_00001.1.el6ea | 0:1.0.26-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-xalan-j2 | <0:2.7.1-36.redhat_00013.1.el6ea | 0:2.7.1-36.redhat_00013.1.el6ea |
| redhat/eap7-yasson | <0:1.0.9-1.redhat_00001.1.el6ea | 0:1.0.9-1.redhat_00001.1.el6ea |
| redhat/eap7-artemis-wildfly-integration | <0:1.0.4-1.redhat_00001.1.el7ea | 0:1.0.4-1.redhat_00001.1.el7ea |
| redhat/eap7-bouncycastle | <0:1.68.0-2.redhat_00005.1.el7ea | 0:1.68.0-2.redhat_00005.1.el7ea |
| redhat/eap7-hal-console | <0:3.2.14-1.Final_redhat_00001.1.el7ea | 0:3.2.14-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-infinispan | <0:9.4.22-3.Final_redhat_00001.1.el7ea | 0:9.4.22-3.Final_redhat_00001.1.el7ea |
| redhat/eap7-ironjacamar | <0:1.4.30-1.Final_redhat_00001.1.el7ea | 0:1.4.30-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jboss-genericjms | <0:2.0.9-1.Final_redhat_00001.1.el7ea | 0:2.0.9-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jboss-marshalling | <0:2.0.11-1.Final_redhat_00001.1.el7ea | 0:2.0.11-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jboss-server-migration | <0:1.7.2-6.Final_redhat_00007.1.el7ea | 0:1.7.2-6.Final_redhat_00007.1.el7ea |
| redhat/eap7-jboss-weld | <3.1-api-0:3.1.0-6.SP3_redhat_00001.1.el7ea | 3.1-api-0:3.1.0-6.SP3_redhat_00001.1.el7ea |
| redhat/eap7-jgroups-kubernetes | <0:1.0.16-1.Final_redhat_00001.1.el7ea | 0:1.0.16-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-netty | <0:4.1.60-1.Final_redhat_00001.1.el7ea | 0:4.1.60-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-resteasy | <0:3.11.4-1.Final_redhat_00001.1.el7ea | 0:3.11.4-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-undertow | <0:2.0.35-1.SP1_redhat_00001.1.el7ea | 0:2.0.35-1.SP1_redhat_00001.1.el7ea |
| redhat/eap7-velocity | <0:2.3.0-1.redhat_00001.1.el7ea | 0:2.3.0-1.redhat_00001.1.el7ea |
| redhat/eap7-weld-core | <0:3.1.6-1.Final_redhat_00001.1.el7ea | 0:3.1.6-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-wildfly | <0:7.3.7-1.GA_redhat_00002.1.el7ea | 0:7.3.7-1.GA_redhat_00002.1.el7ea |
| redhat/eap7-wildfly-elytron | <0:1.10.12-1.Final_redhat_00001.1.el7ea | 0:1.10.12-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-wildfly-http-client | <0:1.0.26-1.Final_redhat_00001.1.el7ea | 0:1.0.26-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-xalan-j2 | <0:2.7.1-36.redhat_00013.1.el7ea | 0:2.7.1-36.redhat_00013.1.el7ea |
| redhat/eap7-yasson | <0:1.0.9-1.redhat_00001.1.el7ea | 0:1.0.9-1.redhat_00001.1.el7ea |
| redhat/eap7-artemis-wildfly-integration | <0:1.0.4-1.redhat_00001.1.el8ea | 0:1.0.4-1.redhat_00001.1.el8ea |
| redhat/eap7-bouncycastle | <0:1.68.0-2.redhat_00005.1.el8ea | 0:1.68.0-2.redhat_00005.1.el8ea |
| redhat/eap7-hal-console | <0:3.2.14-1.Final_redhat_00001.1.el8ea | 0:3.2.14-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-infinispan | <0:9.4.22-3.Final_redhat_00001.1.el8ea | 0:9.4.22-3.Final_redhat_00001.1.el8ea |
| redhat/eap7-ironjacamar | <0:1.4.30-1.Final_redhat_00001.1.el8ea | 0:1.4.30-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-jboss-genericjms | <0:2.0.9-1.Final_redhat_00001.1.el8ea | 0:2.0.9-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-jboss-marshalling | <0:2.0.11-1.Final_redhat_00001.1.el8ea | 0:2.0.11-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-jboss-server-migration | <0:1.7.2-6.Final_redhat_00007.1.el8ea | 0:1.7.2-6.Final_redhat_00007.1.el8ea |
| redhat/eap7-jboss-weld | <3.1-api-0:3.1.0-6.SP3_redhat_00001.1.el8ea | 3.1-api-0:3.1.0-6.SP3_redhat_00001.1.el8ea |
| redhat/eap7-jgroups-kubernetes | <0:1.0.16-1.Final_redhat_00001.1.el8ea | 0:1.0.16-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-netty | <0:4.1.60-1.Final_redhat_00001.1.el8ea | 0:4.1.60-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-resteasy | <0:3.11.4-1.Final_redhat_00001.1.el8ea | 0:3.11.4-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-undertow | <0:2.0.35-1.SP1_redhat_00001.1.el8ea | 0:2.0.35-1.SP1_redhat_00001.1.el8ea |
| redhat/eap7-velocity | <0:2.3.0-1.redhat_00001.1.el8ea | 0:2.3.0-1.redhat_00001.1.el8ea |
| redhat/eap7-weld-core | <0:3.1.6-1.Final_redhat_00001.1.el8ea | 0:3.1.6-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-wildfly | <0:7.3.7-1.GA_redhat_00002.1.el8ea | 0:7.3.7-1.GA_redhat_00002.1.el8ea |
| redhat/eap7-wildfly-elytron | <0:1.10.12-1.Final_redhat_00001.1.el8ea | 0:1.10.12-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-wildfly-http-client | <0:1.0.26-1.Final_redhat_00001.1.el8ea | 0:1.0.26-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-xalan-j2 | <0:2.7.1-36.redhat_00013.1.el8ea | 0:2.7.1-36.redhat_00013.1.el8ea |
| redhat/eap7-yasson | <0:1.0.9-1.redhat_00001.1.el8ea | 0:1.0.9-1.redhat_00001.1.el8ea |
| IBM Sterling External Authentication Server | <=6.0.3 | |
| IBM Sterling External Authentication Server | <=6.1.0 | |
| redhat/velocity | <2.3 | 2.3 |
| Apache Velocity Engine | <2.3 | |
| Apache WSS4J | =2.3.1 | |
| Debian Debian Linux | =9.0 | |
| Oracle Banking Deposits And Lines Of Credit Servicing | =2.12.0 | |
| Oracle Banking Enterprise Default Management | >=2.3.0<=2.4.1 | |
| Oracle Banking Enterprise Default Management | =2.6.2 | |
| Oracle Banking Enterprise Default Management | =2.7.1 | |
| Oracle Banking Enterprise Default Management | =2.10.0 | |
| Oracle Banking Enterprise Default Management | =2.12.0 | |
| Oracle Banking Loans Servicing | =2.12.0 | |
| Oracle Banking Party Management | =2.7.0 | |
| Oracle Banking Platform | >=2.3.0<=2.4.1 | |
| Oracle Banking Platform | =2.6.2 | |
| Oracle Banking Platform | =2.7.1 | |
| Oracle Communications Cloud Native Core Policy | =1.14.0 | |
| Oracle Communications Network Integrity | =7.3.6 | |
| Oracle Hospitality Token Proxy Service | =19.2 | |
| Oracle Retail Integration Bus | =19.0.1 | |
| Oracle Retail Order Broker | =16.0 | |
| Oracle Retail Service Backbone | =19.0.1 | |
| Oracle Retail Xstore Office Cloud Service | =16.0.6 | |
| Oracle Retail Xstore Office Cloud Service | =17.0.4 | |
| Oracle Retail Xstore Office Cloud Service | =18.0.3 | |
| Oracle Retail Xstore Office Cloud Service | =19.0.2 | |
| Oracle Retail Xstore Office Cloud Service | =20.0.1 | |
| Oracle Utilities Testing Accelerator | =6.0.0.1.1 | |
| Oracle Utilities Testing Accelerator | =6.0.0.2.2 | |
| Oracle Utilities Testing Accelerator | =6.0.0.3.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13936
- https://www.openwall.com/lists/oss-security/2021/03/10/1
- http://www.openwall.com/lists/oss-security/2021/03/10/1
- https://lists.apache.org/thread.html/r01043f584cbd47959fabe18fff64de940f81a65024bb8dddbda31d9a%40%3Cuser.velocity.apache.org%3E
- https://lists.apache.org/thread.html/r01043f584cbd47959fabe18fff64de940f81a65024bb8dddbda31d9a@%3Cuser.velocity.apache.org%3E
- https://lists.apache.org/thread.html/r3ea4c4c908505b20a4c268330dfe7188b90c84dcf777728d02068ae6@%3Cannounce.apache.org%3E
- https://lists.apache.org/thread.html/rb042f3b0090e419cc9f5a3d32cf0baff283ccd6fcb1caea61915d6b6@%3Ccommits.velocity.apache.org%3E
- https://ubuntu.com/security/notices/USN-6281-1
- https://nvd.nist.gov/vuln/detail/CVE-2020-13936
- https://launchpad.net/bugs/cve/CVE-2020-13936
- https://security-tracker.debian.org/tracker/CVE-2020-13936
- https://ubuntu.com/security/CVE-2020-13936
- https://lists.apache.org/thread.html/rd2a89e17e8a9b451ce655f1a34117752ea1d18a22ce580d8baa824fd@%3Ccommits.druid.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2021/03/msg00019.html
- https://lists.apache.org/thread.html/re641197d204765130618086238c73dd2ce5a3f94b33785b587d72726@%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/rbee7270556f4172322936b5ecc9fabf0c09f00d4fa56c9de1963c340@%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/rd7e865c87f9043c21d9c1fd9d4df866061d9a08cfc322771160d8058@%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/reab5978b54a9f4c078402161e30a89c42807b198814acadbe6c862c7@%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/r0bc98e9cd080b4a13b905c571b9bed87e1a0878d44dbf21487c6cca4@%3Cdev.santuario.apache.org%3E
- https://lists.apache.org/thread.html/re8e7482fe54d289fc0229e61cc64947b63b12c3c312e9f25bf6f3b8c@%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/r39de20c7e9c808b1f96790875d33e58c9c0aabb44fd9227e7b3dc5da@%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/r4cd59453b65d4ac290fcb3b71fdf32b4f1f8989025e89558deb5a245@%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/r17cb932fab14801b14e5b97a7f05192f4f366ef260c10d4a8dba8ac9@%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/r7f209b837217d2a0fe5977fb692e7f15d37fa5de8214bcdc4c21d9a7@%3Ccommits.turbine.apache.org%3E
- https://lists.apache.org/thread.html/r293284c6806c73f51098001ea86a14271c39f72cd76af9e946d9d9ad@%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/rf7d369de88dc88a1347006a3323b3746d849234db40a8edfd5ebc436@%3Cdev.ws.apache.org%3E
- https://security.gentoo.org/glsa/202107-52
- https://lists.apache.org/thread.html/r9dc2505651788ac668299774d9e7af4dc616be2f56fdc684d1170882@%3Cusers.activemq.apache.org%3E
- https://lists.apache.org/thread.html/r52a5129df402352adc34d052bab9234c8ef63596306506a89fdc7328@%3Cusers.activemq.apache.org%3E
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://github.com/apache/velocity-engine/commit/1ba60771d23dae7e6b3138ae6bee09cf6f9d2485
- https://www.cve.org/CVERecord?id=CVE-2020-13936 https://nvd.nist.gov/vuln/detail/CVE-2020-13936
- https://bugzilla.redhat.com/show_bug.cgi?id=1937440
- https://access.redhat.com/errata/RHSA-2021:4918
- https://access.redhat.com/errata/RHSA-2021:4767
- https://access.redhat.com/errata/RHSA-2021:2051
- https://access.redhat.com/errata/RHSA-2021:3660
- https://access.redhat.com/errata/RHSA-2021:2046
- https://access.redhat.com/errata/RHSA-2021:2047
- https://access.redhat.com/errata/RHSA-2021:2048
- https://access.redhat.com/errata/RHSA-2021:3658
- https://access.redhat.com/errata/RHSA-2021:3656
- https://access.redhat.com/errata/RHSA-2021:2210
- https://access.redhat.com/errata/RHSA-2021:2755
- https://access.redhat.com/errata/RHSA-2021:3140
- https://access.redhat.com/security/cve/cve-2020-13936
- https://exchange.xforce.ibmcloud.com/vulnerabilities/197993
- https://www.ibm.com/support/pages/node/7029765 (Advisory)
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1937442
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1937441
- https://github.com/apache/velocity-engine/commit/15909056fe51f5d39d49e101d706d3075876dde4
- https://github.com/apache/velocity-engine/commit/3f5d477bb4f4397bed2d2926c35dcef7de3aae3e
- https://access.redhat.com/support/policy/updates/jboss_notes
- https://lists.apache.org/thread.html/rb042f3b0090e419cc9f5a3d32cf0baff283ccd6fcb1caea61915d6b6%40%3Ccommits.velocity.apache.org%3E
- https://lists.apache.org/thread.html/r3ea4c4c908505b20a4c268330dfe7188b90c84dcf777728d02068ae6%40%3Cannounce.apache.org%3E
- https://lists.apache.org/thread.html/rd2a89e17e8a9b451ce655f1a34117752ea1d18a22ce580d8baa824fd%40%3Ccommits.druid.apache.org%3E
- https://lists.apache.org/thread.html/re641197d204765130618086238c73dd2ce5a3f94b33785b587d72726%40%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/rbee7270556f4172322936b5ecc9fabf0c09f00d4fa56c9de1963c340%40%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/reab5978b54a9f4c078402161e30a89c42807b198814acadbe6c862c7%40%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/rd7e865c87f9043c21d9c1fd9d4df866061d9a08cfc322771160d8058%40%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/re8e7482fe54d289fc0229e61cc64947b63b12c3c312e9f25bf6f3b8c%40%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/r0bc98e9cd080b4a13b905c571b9bed87e1a0878d44dbf21487c6cca4%40%3Cdev.santuario.apache.org%3E
- https://lists.apache.org/thread.html/r39de20c7e9c808b1f96790875d33e58c9c0aabb44fd9227e7b3dc5da%40%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/r17cb932fab14801b14e5b97a7f05192f4f366ef260c10d4a8dba8ac9%40%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/r4cd59453b65d4ac290fcb3b71fdf32b4f1f8989025e89558deb5a245%40%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/r7f209b837217d2a0fe5977fb692e7f15d37fa5de8214bcdc4c21d9a7%40%3Ccommits.turbine.apache.org%3E
- https://lists.apache.org/thread.html/r293284c6806c73f51098001ea86a14271c39f72cd76af9e946d9d9ad%40%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/rf7d369de88dc88a1347006a3323b3746d849234db40a8edfd5ebc436%40%3Cdev.ws.apache.org%3E
- https://lists.apache.org/thread.html/r9dc2505651788ac668299774d9e7af4dc616be2f56fdc684d1170882%40%3Cusers.activemq.apache.org%3E
- https://lists.apache.org/thread.html/r52a5129df402352adc34d052bab9234c8ef63596306506a89fdc7328%40%3Cusers.activemq.apache.org%3E
Parent vulnerabilities
(Appears in the following advisories)
- collector/usn-cve
- collector/launchpad-cve
- collector/security-tracker-debian
- collector/redhat-cve
- collector/ibm-support
- agent/author
- agent/weakness
- agent/type
- agent/remedy
- agent/first-publish-date
- agent/severity
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-13936
- agent/software-canonical-lookup
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-cve
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/last-modified-date
- agent/references
- agent/tags
- agent/event
- package-manager/ubuntu
- package-manager/debian
- package-manager/redhat
- vendor/ibm
- canonical/ibm sterling external authentication server
- version/ibm sterling external authentication server/6.0.3
- version/ibm sterling external authentication server/6.1.0
- vendor/apache
- canonical/apache velocity engine
- canonical/apache wss4j
- version/apache wss4j/2.3.1
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/9.0
- vendor/oracle
- canonical/oracle banking deposits and lines of credit servicing
- version/oracle banking deposits and lines of credit servicing/2.12.0
- canonical/oracle banking enterprise default management
- version/oracle banking enterprise default management/2.3.0
- version/oracle banking enterprise default management/2.4.1
- version/oracle banking enterprise default management/2.6.2
- version/oracle banking enterprise default management/2.7.1
- version/oracle banking enterprise default management/2.10.0
- version/oracle banking enterprise default management/2.12.0
- canonical/oracle banking loans servicing
- version/oracle banking loans servicing/2.12.0
- canonical/oracle banking party management
- version/oracle banking party management/2.7.0
- canonical/oracle banking platform
- version/oracle banking platform/2.3.0
- version/oracle banking platform/2.4.1
- version/oracle banking platform/2.6.2
- version/oracle banking platform/2.7.1
- canonical/oracle communications cloud native core policy
- version/oracle communications cloud native core policy/1.14.0
- canonical/oracle communications network integrity
- version/oracle communications network integrity/7.3.6
- canonical/oracle hospitality token proxy service
- version/oracle hospitality token proxy service/19.2
- canonical/oracle retail integration bus
- version/oracle retail integration bus/19.0.1
- canonical/oracle retail order broker
- version/oracle retail order broker/16.0
- canonical/oracle retail service backbone
- version/oracle retail service backbone/19.0.1
- canonical/oracle retail xstore office cloud service
- version/oracle retail xstore office cloud service/16.0.6
- version/oracle retail xstore office cloud service/17.0.4
- version/oracle retail xstore office cloud service/18.0.3
- version/oracle retail xstore office cloud service/19.0.2
- version/oracle retail xstore office cloud service/20.0.1
- canonical/oracle utilities testing accelerator
- version/oracle utilities testing accelerator/6.0.0.1.1
- version/oracle utilities testing accelerator/6.0.0.2.2
- version/oracle utilities testing accelerator/6.0.0.3.1