oracle retail back office 13.3 vulnerabilities and exploits

(subscribe to this query)

4.9

CVSSv2

Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

Oracle Retail Back Office 13.4 Oracle Retail Back Office 14.1 Oracle Retail Back Office 14.0 Oracle Retail Back Office 13.3 Oracle Retail Back Office 13.2

7.5

CVSSv2

In Apache Batik 1.x prior to 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deser...

1 Article

4.3

CVSSv2

Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote malicious users to affect integrity via unknown vectors.

Oracle Retail Applications 12.0in Oracle Retail Applications 13.0 Oracle Retail Applications 13.3 Oracle Retail Applications 13.4 Oracle Retail Applications 12.0 Oracle Retail Applications 14.0 Oracle Retail Applications 14.1 Oracle Retail Applications 13.1 Oracle Retail Applications 13.2

4.3

CVSSv2

jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

97 Github repositories

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook