EUVD-2021-0611

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Guava has a vulnerability allowing temp directory access; avoid deprecated methods and switch APIs.

Reporter	Title	Published	Views	Family All 184
IBM Security Bulletins	Security Bulletin: IBM Security Risk Manager on CP4S is affected by multiple vulnerabilities	18 Oct 202114:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager	16 Dec 202507:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities	16 Jun 202221:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data are addressed	23 Jun 202516:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities with DataStage on Cloud Pak for Data related to Apache hbase-client 2.4.15	18 Mar 202514:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Guava API affect IBM Operations Analytics - Log Analysis (CVE-2020-8908)	3 Nov 202206:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager	16 Dec 202505:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in Google Guava (CVE-2018-10237, CVE-2020-8908)	17 May 202320:39	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability with Guava affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2020-8908)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	23 Jul 202113:09	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "e26e8e0d-89f5-3a05-83df-a97e9f47f227",
        "vendor": {
          "name": "Google LLC"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "b96404c6-07a3-391a-a41d-c7fc66166786",
        "product": {
          "name": "Guava"
        },
        "product_version": "1.0 <32.0"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8908
github	www.github.com/google/guava/issues/4011
github	www.github.com/google/guava/issues/4011
github	www.github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284
github	www.github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40
lists	www.lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604@%3Ctorque-dev.db.apache.org%3E
lists	www.lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604%40%3Ctorque-dev.db.apache.org%3E
lists	www.lists.apache.org/thread.html/rd2704306ec729ccac726e50339b8a8f079515cc29ccb77713b16e7c5@%3Cissues.hive.apache.org%3E
lists	www.lists.apache.org/thread.html/rd2704306ec729ccac726e50339b8a8f079515cc29ccb77713b16e7c5%40%3Cissues.hive.apache.org%3E
lists	www.lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.13.3

CVSS 22.1

EPSS0.00964