Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle retail integration bus 16.0.3 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3

CVE-2021-40690

All versions of Apache Santuario - XML Security for Java before 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an malicious user to abuse an XP...
Apache Santuario Xml Security For JavaApache TomeeApache Cxf 3.4.4Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Oracle Flexcube Private Banking 12.1.0Oracle Agile Plm 9.3.6Oracle Weblogic Server 12.2.1.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Outside In Technology 8.5.5Oracle Weblogic Server 14.1.1.0.0Oracle Retail Merchandising System 16.0.3Oracle Retail Service Backbone 16.0.3Oracle Retail Financial Integration 16.0.3Oracle Retail Integration Bus 16.0.3Oracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Retail Service Backbone 15.0.3.1Oracle Retail Service Backbone 14.1.3.2Oracle Communications Messaging Server 8.1Oracle Retail Merchandising System 19.0.1
6.5
CVSSv3

CVE-2022-23437

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulner...
Apache Xerces-jOracle Ilearning 6.2Oracle Flexcube Universal Banking 12.4.0Oracle Weblogic Server 12.2.1.3.0Oracle Agile Plm 9.3.6Oracle Weblogic Server 12.2.1.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Weblogic Server 14.1.1.0.0Oracle Retail Bulk Data Integration 16.0.3.0Oracle Retail Merchandising System 16.0.3Oracle Global Lifecycle Management Nextgen Oui Framework 13.9.4.2.2Oracle Agile Engineering Data Management 6.2.1.0Oracle Retail Service Backbone 16.0.3Oracle Retail Financial Integration 16.0.3Oracle Retail Integration Bus 16.0.3Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Retail Service Backbone 15.0.3.1Oracle Retail Service Backbone 14.1.3.2Oracle Financial Services Enterprise Case Management 8.0.7.2.0Oracle Banking Party Management 2.7.0Oracle Retail Merchandising System 19.0.1Oracle Retail Integration Bus 14.1.3.2
6.3
CVSSv3

CVE-2020-1945

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory bac...
Apache AntCanonical Ubuntu Linux 19.10Fedoraproject Fedora 31Fedoraproject Fedora 32Opensuse Leap 15.2Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Retail Integration Bus 14.1Oracle Flexcube Private Banking 12.0.0Oracle Retail Store Inventory Management 14.1Oracle Primavera Unifier 16.1Oracle Enterprise Repository 11.1.1.7.0Oracle Retail Service Backbone 15.0Oracle Retail Integration Bus 15.0Oracle Retail Back Office 14.1Oracle Retail Back Office 14.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 2.2.0.0.0Oracle Flexcube Investor Servicing 12.4.0
6.1
CVSSv3

CVE-2019-17091

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J prior to 2.3.10 and Mojarra JavaServer Faces prior to 2.2.20, allows Reflected XSS because a client window field is mishandled.
Eclipse MojarraOracle Mojarra Javaserver FacesOracle Retail Service Backbone 15.0Oracle Retail Integration Bus 15.0Oracle Retail Merchandising System 16.0Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Secure Global Desktop 5.4Oracle Health Sciences Information Manager 3.0Oracle Retail Integration Bus 16.0Oracle Enterprise Data Quality 12.2.1.3.0Oracle Retail Financial Integration 15.0Oracle Retail Financial Integration 16.0Oracle Communications Unified Inventory Management 7.4.0Oracle Primavera P6 Enterprise Project Portfolio Management 19.12.0.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Secure Global Desktop 5.5Oracle Rapid Planning 12.1Oracle Rapid Planning 12.2Oracle Communications Diameter Signaling RouterOracle Communications Unified Inventory Management 7.3.0Oracle Retail Bulk Data Integration 16.0.3.0
6.5
CVSSv3

CVE-2020-5421

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.
Vmware Spring FrameworkOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Weblogic Server 12.1.3.0.0Oracle Insurance Rules Palette 10.2.0Oracle Weblogic Server 10.3.6.0.0Oracle Weblogic Server 12.2.1.3.0Oracle Endeca Information Discovery Integrator 3.2.0Oracle Retail Predictive Application Server 14.1Oracle Retail Order Broker 15.0Oracle Retail Order Broker 16.0Oracle Retail Integration Bus 14.1.3Oracle Retail Returns Management 14.1Oracle Insurance Policy Administration 10.2Oracle Enterprise Data Quality 12.2.1.3.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Retail Invoice Matching 14.0Oracle Retail Invoice Matching 14.1Oracle Fusion Middleware 12.2.1.3.0Oracle Weblogic Server 12.2.1.4.0Oracle Fusion Middleware 12.2.1.4.0
7.5
CVSSv3

CVE-2020-11979

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively n...
Apache Ant 1.10.8Gradle GradleFedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Banking Platform 2.4.0Oracle Flexcube Private Banking 12.0.0Oracle Api Gateway 11.1.2.4.0Oracle Banking Platform 2.4.1Oracle Primavera Unifier 16.1Oracle Enterprise Repository 11.1.1.7.0Oracle Retail Predictive Application Server 14.1Oracle Banking Platform 2.6.2Oracle Primavera Unifier 18.8Oracle Data Integrator 12.2.1.3.0Oracle Primavera UnifierOracle Utilities Framework 4.3.0.5.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.4.0
7.8
CVSSv3

CVE-2021-22118

In Spring Framework, versions 5.2.x before 5.2.15 and versions 5.3.x before 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been upload...
Vmware Spring FrameworkOracle Retail Order Broker 16.0Oracle Retail Predictive Application Server 15.0.3Oracle Enterprise Data Quality 12.2.1.3.0Oracle Retail Assortment Planning 16.0Oracle Retail Financial Integration 16.0.3Oracle Communications Network Integrity 7.3.6Oracle Retail Integration Bus 16.0.3Oracle Insurance Rules Palette 11.0.2Oracle Insurance Rules Palette 11.1.0Oracle Communications Interactive Session Recorder 6.4Oracle Commerce Guided Search 11.3.2Oracle Communications Unified Inventory Management 7.4.1Oracle Retail Customer Management And Segmentation FoundationOracle Enterprise Data Quality 12.2.1.4.0Oracle Communications Element ManagerOracle Insurance Policy AdministrationOracle Healthcare Data Repository 8.1.0Oracle DocumakerOracle Mysql Enterprise MonitorOracle Communications Session Report ManagerOracle Communications Brm - Elastic Charging Engine 12.0.0.3
6.5
CVSSv3

CVE-2019-3739

RSA BSAFE Crypto-J versions before 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.
Dell Bsafe Ssl-jDell Bsafe Crypto-jDell Bsafe Cert-jOracle Retail Service Backbone 14.1Oracle Retail Integration Bus 14.1Oracle Retail Service Backbone 15.0Oracle Retail Integration Bus 15.0Oracle Weblogic Server 10.3.6.0.0Oracle Weblogic Server 12.2.1.3.0Oracle Retail Integration Bus 16.0Oracle Retail Xstore Point Of Service 17.0.3Oracle Weblogic Server 12.2.1.4.0Oracle Application Performance Management 13.3.0.0Oracle Weblogic Server 14.1.1.0.0Oracle Database 12.1.0.2Oracle Database 12.2.0.1Oracle Database 18cOracle Database 19cOracle Retail Assortment Planning 15.0.3.0Oracle Retail Predictive Application Server 14.1.3.0Oracle Retail Predictive Application Server 15.0.3.0Oracle Retail Assortment Planning 16.0.3.0
5.5
CVSSv3

CVE-2021-36373

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant before 1.9.16 and 1.10.11 were aff...
Apache AntOracle Retail Store Inventory Management 14.1Oracle Enterprise Repository 11.1.1.7.0Oracle Retail Back Office 14.1Oracle Retail Back Office 14.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Retail Central Office 14.0Oracle Retail Central Office 14.1Oracle Primavera Unifier 18.8Oracle Retail Point-of-service 14.1Oracle Retail Point-of-service 14.0Oracle Retail Predictive Application Server 15.0.3Oracle Primavera UnifierOracle Utilities Framework 4.4.0.0.0Oracle Agile Plm 9.3.6Oracle Communications Unified Inventory Management 7.4.0Oracle Retail Store Inventory Management 16.0Oracle Primavera Unifier 19.12Oracle Utilities FrameworkOracle Utilities Framework 4.4.0.2.0Oracle Communications Unified Inventory Management 7.3.0
5.5
CVSSv3

CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats ...
Apache AntOracle Retail Store Inventory Management 14.1Oracle Enterprise Repository 11.1.1.7.0Oracle Retail Back Office 14.1Oracle Retail Back Office 14.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Retail Central Office 14.0Oracle Retail Central Office 14.1Oracle Primavera Unifier 18.8Oracle Retail Point-of-service 14.1Oracle Retail Point-of-service 14.0Oracle Retail Predictive Application Server 15.0.3Oracle Primavera UnifierOracle Utilities Framework 4.4.0.0.0Oracle Agile Plm 9.3.6Oracle Communications Unified Inventory Management 7.4.0Oracle Retail Store Inventory Management 16.0Oracle Primavera Unifier 19.12Oracle Utilities FrameworkOracle Utilities Framework 4.4.0.2.0Oracle Communications Unified Inventory Management 7.3.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-20017administrator privilegesCVE-2024-36401CVE-2024-8521CVE-2024-8247event management systemCVE-2024-45098aspera faspexremote attackersXSSmindsdbangeljudesuarezCVE-2024-45157
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook