Skip to contentOracle Retail Back Office vulnerabilities
- apache log4j, apache software foundation log4j2, debian linux +114 more +116 moreApache Log4j2 does not always protect from infinite recursion in lookup evaluationCVE-2021-45105Public exploitFix availableEPSS 100.0%5.9 Medium
- oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 moreVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported...CVE-2021-23518.3 High
- antisamy project antisamy, netapp active iq unified manager, oracle banking enterprise default management +8 more +10 moreCross-site Scripting in OWASP AntiSamyCVE-2021-35043Fix available6.1 Medium
- apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 moreApache Ant ZIP, and ZIP based, archive denial of service vulerabilityCVE-2021-36374Fix available5.5 Medium
- apache ant, oracle agile product lifecycle management, banking trade finance +29 more +31 moreApache Ant TAR archive denial of service vulnerabilityCVE-2021-36373Fix available5.5 Medium
- apache batik, debian linux, fedoraproject fedora +19 more +21 moreServer-side request forgery (SSRF) in Apache BatikCVE-2020-11987Fix availableEPSS 13.6%8.2 High
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache AntCVE-2020-1945Fix available6.3 Medium
- jquery, debian linux, drupal +67 more +69 morejQuery has a potential XSS vulnerabilityCVE-2020-11022Public exploitFix availableEPSS 99.2%6.9 Medium
- spring framework, vmware spring framework, oracle application testing suite +25 more +27 moreCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxCVE-2020-5397Fix available5.3 Medium
- spring framework, vmware spring framework, netapp data availability services +31 more +33 moreRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398Public exploitFix availableEPSS 88.3%8.0 High
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- apache commons beanutils, nifi, debian linux +57 more +59 moreInsecure Deserialization in Apache Commons BeanutilsCVE-2019-10086Fix availableEPSS 29.1%7.3 High
- softwareag quartz, apache tomee, atlassian jira service management +28 more +30 moreXML external entity injection in Terracotta Quartz SchedulerCVE-2019-13990Public exploitFix availableEPSS 16.6%9.8 Critical
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- apache batik, canonical ubuntu linux, debian linux +18 more +20 moreDeserialization of Untrusted Data in Apache BatikCVE-2018-8013Fix availableEPSS 18.6%9.8 Critical
- pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 moreSpring Framework when used in combination with any versions of Spring Security contains an authorization bypassCVE-2018-1258Fix available8.8 High
- oracle retail back officeVulnerability in the Oracle Retail Back Office component of Oracle Retail Applications ...CVE-2018-28616.5 Medium
- spring by pivotal framework, vmware spring framework, oracle application testing suite +23 more +25 morePossible privilege escalation in org.springframework:spring-coreCVE-2018-1272Fix available7.5 High
- spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 morePath Traversal in org.springframework:spring-coreCVE-2018-1271Fix availableEPSS 30.3%5.9 Medium
- spring by pivotal framework, vmware spring framework, debian linux +26 more +28 moreSpring Framework allows applications to expose STOMP over WebSocket endpointsCVE-2018-1270Public exploitFix availableEPSS 77.6%9.8 Critical
- oracle retail back officeVulnerability in the Oracle Retail Back Office component of Oracle Retail Applications ...CVE-2017-104235.4 Medium
- apache tomcat, canonical ubuntu linux, debian linux +55 more +57 moreUnrestricted Upload of File with Dangerous Type Apache TomcatCVE-2017-12617In KEVPublic exploitFix availableEPSS 100.0%8.1 High