oracle retail xstore point of service 19.0 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration....

Mchange C3p0 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Oracle Communications Ip Service Activator 7.3.0 Oracle Communications Ip Service Activator 7.4.0 Oracle Communications Session Route Manager Oracle Documaker Oracle Enterprise Manager Base Platform 13.2.1.0 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Flexcube Private Banking 12.0.0 Oracle Flexcube Private Banking 12.1.0 Oracle Hyperion Infrastructure Technology 11.1.2.4 Oracle Retail Xstore Point Of Service 15.0 Oracle Retail Xstore Point Of Service 16.0 Oracle Retail Xstore Point Of Service 17.0 Oracle Retail Xstore Point Of Service 18.0 Oracle Retail Xstore Point Of Service 19.0 Oracle Webcenter Sites 12.2.1.3.0 Oracle Webcenter Sites 12.2.1.4.03 Github repositories available

9.8

CVSSv3

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap)....

Fasterxml Jackson-databind Netapp Active Iq Unified Manager Debian Debian Linux 8.0 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Platform Oracle Communications Contacts Server 8.0.0.4.0 Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Network Charging And Control 6.0.1 Oracle Communications Network Charging And Control Oracle Enterprise Manager Base Platform 13.3.0.0 Oracle Enterprise Manager Base Platform 13.4.0.0 Oracle Global Lifecycle Management Opatch Oracle Jd Edwards Enterpriseone Orchestrator Oracle Jd Edwards Enterpriseone Tools Oracle Primavera Unifier 16.1 Oracle Primavera Unifier 16.2 Oracle Primavera Unifier Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 19.12 Oracle Retail Xstore Point Of Service 15.0 Oracle Retail Xstore Point Of Service 16.0 Oracle Retail Xstore Point Of Service 17.0 Oracle Retail Xstore Point Of Service 18.0 Oracle Retail Xstore Point Of Service 19.0 Oracle Weblogic Server 12.2.1.3.0 Oracle Weblogic Server 12.2.1.4.024 Github repositories available

8.1

CVSSv3

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly)....

Fasterxml Jackson-databind Debian Debian Linux 8.0 Netapp Active Iq Unified Manager Netapp Steelstore Cloud Integrated Storage -Oracle Banking Platform Oracle Communications Contacts Server 8.0.0.4.0 Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Network Charging And Control 6.0.1 Oracle Communications Network Charging And Control Oracle Enterprise Manager Base Platform 13.3.0.0 Oracle Enterprise Manager Base Platform 13.4.0.0 Oracle Global Lifecycle Management Opatch Oracle Jd Edwards Enterpriseone Orchestrator Oracle Jd Edwards Enterpriseone Tools Oracle Primavera Unifier 16.1 Oracle Primavera Unifier 16.2 Oracle Primavera Unifier Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 19.12 Oracle Retail Merchandising System 15.0 Oracle Retail Sales Audit 14.1 Oracle Retail Xstore Point Of Service 15.0 Oracle Retail Xstore Point Of Service 16.0 Oracle Retail Xstore Point Of Service 17.0 Oracle Retail Xstore Point Of Service 18.0 Oracle Retail Xstore Point Of Service 19.0 Oracle Weblogic Server 12.2.1.3.0 Oracle Weblogic Server 12.2.1.4.04 Github repositories available

7.5

CVSSv3

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by...

Apache Commons Compress Fedoraproject Fedora 30 Fedoraproject Fedora 31 Oracle Flexcube Investor Servicing 12.3.0 Oracle Flexcube Investor Servicing 12.1.0 Oracle Retail Xstore Point Of Service 15.0 Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Retail Integration Bus 15.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Flexcube Investor Servicing 12.4.0 Oracle Peoplesoft Enterprise Pt Peopletools 8.56 Oracle Retail Xstore Point Of Service 16.0 Oracle Banking Payments Oracle Banking Platform 2.6.2 Oracle Banking Platform 2.7.0 Oracle Banking Platform 2.8.0 Oracle Banking Platform 2.9.0 Oracle Communications Ip Service Activator 7.3.0 Oracle Communications Ip Service Activator 7.4.0 Oracle Communications Session Route Manager Oracle Customer Management And Segmentation Foundation 18.0 Oracle Flexcube Investor Servicing 14.0.0 Oracle Flexcube Investor Servicing 14.1.0 Oracle Hyperion Infrastructure Technology 11.1.2.4 Oracle Jdeveloper 12.2.1.4.0 Oracle Primavera Gateway Oracle Primavera Gateway 19.12.0 Oracle Retail Integration Bus 16.0 Oracle Retail Xstore Point Of Service 17.0 Oracle Retail Xstore Point Of Service 18.0 Oracle Retail Xstore Point Of Service 19.0 Oracle Webcenter Portal 12.2.1.4.0 Oracle Communications Element Manager Oracle Communications Session Report Manager Oracle Essbase 21.2 Oracle Peoplesoft Enterprise Pt Peopletools 8.57 Oracle Peoplesoft Enterprise Pt Peopletools 8.582 Github repositories available

8.1

CVSSv3

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop)....

Fasterxml Jackson-databind Debian Debian Linux 8.0 Netapp Active Iq Unified Manager Netapp Steelstore Cloud Integrated Storage -Oracle Agile Plm 9.3.6 Oracle Banking Platform Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Network Charging And Control 6.0.1 Oracle Communications Network Charging And Control Oracle Enterprise Manager Base Platform 13.3.0.0 Oracle Enterprise Manager Base Platform 13.4.0.0 Oracle Global Lifecycle Management Opatch Oracle Jd Edwards Enterpriseone Orchestrator Oracle Jd Edwards Enterpriseone Tools Oracle Primavera Unifier 16.1 Oracle Primavera Unifier 16.2 Oracle Primavera Unifier Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 19.12 Oracle Retail Merchandising System 15.0 Oracle Retail Sales Audit 14.1 Oracle Retail Xstore Point Of Service 15.0 Oracle Retail Xstore Point Of Service 16.0 Oracle Retail Xstore Point Of Service 17.0 Oracle Retail Xstore Point Of Service 18.0 Oracle Retail Xstore Point Of Service 19.0 Oracle Weblogic Server 12.2.1.3.0 Oracle Weblogic Server 12.2.1.4.01 Github repository available

9.8

CVSSv3

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description....

Softwareag Quartz Oracle Apache Batik Mapviewer 12.2.0.1 Oracle Apache Batik Mapviewer 18c Oracle Apache Batik Mapviewer 19c Oracle Banking Enterprise Originations 2.7.0 Oracle Banking Enterprise Originations 2.8.0 Oracle Banking Enterprise Product Manufacturing 2.7.0 Oracle Banking Enterprise Product Manufacturing 2.8.0 Oracle Banking Payments Oracle Communications Ip Service Activator 7.3.0 Oracle Communications Ip Service Activator 7.4.0 Oracle Communications Session Route Manager Oracle Customer Management And Segmentation Foundation 18.0 Oracle Documaker Oracle Enterprise Manager Base Platform 13.2.1.0 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Flexcube Investor Servicing 12.1.0 Oracle Flexcube Investor Servicing 12.3.0 Oracle Flexcube Investor Servicing 12.4.0 Oracle Flexcube Investor Servicing 14.1.0 Oracle Flexcube Investor Servicing 14.4.0 Oracle Flexcube Private Banking 12.0.0 Oracle Flexcube Private Banking 12.1.0 Oracle Fusion Middleware Mapviewer 12.2.1.3.0 Oracle Google Guava Mapviewer 12.2.0.1 Oracle Google Guava Mapviewer 18c Oracle Google Guava Mapviewer 19c Oracle Hyperion Infrastructure Technology 11.1.2.4 Oracle Jd Edwards Enterpriseone Orchestrator Oracle Primavera Unifier 16.1 Oracle Primavera Unifier 16.2 Oracle Primavera Unifier Oracle Primavera Unifier 18.8 Oracle Retail Back Office 14.1 Oracle Retail Central Office 14.1 Oracle Retail Integration Bus 15.0 Oracle Retail Integration Bus 16.0 Oracle Retail Order Broker 15.0 Oracle Retail Order Broker 16.0 Oracle Retail Order Broker 18.0 Oracle Retail Order Broker 19.0 Oracle Retail Point-of-service 14.1 Oracle Retail Returns Management 14.1 Oracle Retail Xstore Point Of Service 15.0 Oracle Retail Xstore Point Of Service 16.0 Oracle Retail Xstore Point Of Service 17.0 Oracle Retail Xstore Point Of Service 18.0 Oracle Retail Xstore Point Of Service 19.0 Oracle Terracotta Quartz Scheduler Mapviewer 12.2.0.1 Oracle Terracotta Quartz Scheduler Mapviewer 18c Oracle Terracotta Quartz Scheduler Mapviewer 19c Oracle Webcenter Sites 12.2.1.3.0 Oracle Webcenter Sites 12.2.1.4.0 Apache Tomee 7.1.32 Github repositories available

8.8

CVSSv3

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms)....

Fasterxml Jackson-databind Debian Debian Linux 8.0 Netapp Steelstore Cloud Integrated Storage -Oracle Agile Plm 9.3.6 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Banking Platform Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Element Manager Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Network Charging And Control 6.0.1 Oracle Communications Network Charging And Control Oracle Communications Session Report Manager Oracle Communications Session Route Manager Oracle Enterprise Manager Base Platform 13.3.0.0 Oracle Enterprise Manager Base Platform 13.4.0.0 Oracle Global Lifecycle Management Opatch Oracle Jd Edwards Enterpriseone Orchestrator Oracle Jd Edwards Enterpriseone Tools Oracle Primavera Unifier 16.1 Oracle Primavera Unifier 16.2 Oracle Primavera Unifier Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 19.12 Oracle Retail Merchandising System 15.0 Oracle Retail Sales Audit 14.1 Oracle Retail Xstore Point Of Service 15.0 Oracle Retail Xstore Point Of Service 16.0 Oracle Retail Xstore Point Of Service 17.0 Oracle Retail Xstore Point Of Service 18.0 Oracle Retail Xstore Point Of Service 19.0 Oracle Weblogic Server 12.2.1.3.0 Oracle Weblogic Server 12.2.1.4.02 Github repositories available

9.8

CVSSv3

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config)....

Fasterxml Jackson-databind Netapp Active Iq Unified Manager Debian Debian Linux 8.0 Oracle Agile Plm 9.3.6 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Banking Platform Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Element Manager Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Network Charging And Control 6.0.1 Oracle Communications Network Charging And Control Oracle Communications Session Report Manager Oracle Communications Session Route Manager Oracle Enterprise Manager Base Platform 13.3.0.0 Oracle Enterprise Manager Base Platform 13.4.0.0 Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Institutional Performance Analytics 8.0.6 Oracle Financial Services Institutional Performance Analytics 8.0.7 Oracle Financial Services Institutional Performance Analytics 8.1.0 Oracle Financial Services Institutional Performance Analytics 8.7.0 Oracle Financial Services Price Creation And Discovery 8.0.6 Oracle Financial Services Price Creation And Discovery 8.0.7 Oracle Financial Services Retail Customer Analytics 8.0.6 Oracle Global Lifecycle Management Opatch Oracle Insurance Policy Administration J2ee 11.0.2.25 Oracle Insurance Policy Administration J2ee 11.1.0.15 Oracle Jd Edwards Enterpriseone Orchestrator Oracle Jd Edwards Enterpriseone Tools Oracle Primavera Unifier 16.1 Oracle Primavera Unifier 16.2 Oracle Primavera Unifier Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 19.12 Oracle Retail Merchandising System 15.0 Oracle Retail Sales Audit 14.1 Oracle Retail Service Backbone 14.1 Oracle Retail Service Backbone 15.0 Oracle Retail Service Backbone 16.0 Oracle Retail Xstore Point Of Service 15.0 Oracle Retail Xstore Point Of Service 16.0 Oracle Retail Xstore Point Of Service 17.0 Oracle Retail Xstore Point Of Service 18.0 Oracle Retail Xstore Point Of Service 19.0 Oracle Weblogic Server 12.2.1.3.0 Oracle Weblogic Server 12.2.1.4.04 Github repositories available

8.8

CVSSv3

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms)....

Fasterxml Jackson-databind Debian Debian Linux 8.0 Netapp Steelstore Cloud Integrated Storage -Oracle Agile Plm 9.3.6 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Banking Platform Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Element Manager Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Network Charging And Control 6.0.1 Oracle Communications Network Charging And Control Oracle Communications Session Report Manager Oracle Communications Session Route Manager Oracle Enterprise Manager Base Platform 13.3.0.0 Oracle Enterprise Manager Base Platform 13.4.0.0 Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Institutional Performance Analytics 8.0.6 Oracle Financial Services Institutional Performance Analytics 8.0.7 Oracle Financial Services Institutional Performance Analytics 8.1.0 Oracle Financial Services Price Creation And Discovery 8.0.6 Oracle Financial Services Price Creation And Discovery 8.0.7 Oracle Financial Services Retail Customer Analytics 8.0.6 Oracle Global Lifecycle Management Opatch Oracle Insurance Policy Administration J2ee 11.0.2.25 Oracle Insurance Policy Administration J2ee 11.1.0.15 Oracle Jd Edwards Enterpriseone Orchestrator Oracle Jd Edwards Enterpriseone Tools Oracle Primavera Unifier 16.1 Oracle Primavera Unifier 16.2 Oracle Primavera Unifier Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 19.12 Oracle Retail Merchandising System 15.0 Oracle Retail Sales Audit 14.1 Oracle Retail Service Backbone 14.1 Oracle Retail Service Backbone 15.0 Oracle Retail Service Backbone 16.0 Oracle Retail Xstore Point Of Service 15.0 Oracle Retail Xstore Point Of Service 16.0 Oracle Retail Xstore Point Of Service 17.0 Oracle Retail Xstore Point Of Service 18.0 Oracle Retail Xstore Point Of Service 19.0 Oracle Weblogic Server 12.2.1.3.0 Oracle Weblogic Server 12.2.1.4.02 Github repositories available

9.8

CVSSv3

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core)....

Fasterxml Jackson-databind Netapp Active Iq Unified Manager Debian Debian Linux 8.0 Oracle Agile Plm 9.3.6 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Banking Platform Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Element Manager Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Network Charging And Control 6.0.1 Oracle Communications Network Charging And Control Oracle Communications Session Report Manager Oracle Communications Session Route Manager Oracle Enterprise Manager Base Platform 13.3.0.0 Oracle Enterprise Manager Base Platform 13.4.0.0 Oracle Global Lifecycle Management Opatch Oracle Jd Edwards Enterpriseone Orchestrator Oracle Jd Edwards Enterpriseone Tools Oracle Primavera Unifier 16.1 Oracle Primavera Unifier 16.2 Oracle Primavera Unifier Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 19.12 Oracle Retail Merchandising System 15.0 Oracle Retail Sales Audit 14.1 Oracle Retail Xstore Point Of Service 15.0 Oracle Retail Xstore Point Of Service 16.0 Oracle Retail Xstore Point Of Service 17.0 Oracle Retail Xstore Point Of Service 18.0 Oracle Retail Xstore Point Of Service 19.0 Oracle Weblogic Server 12.2.1.3.0 Oracle Weblogic Server 12.2.1.4.021 Github repositories available

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook