Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle retail xstore point of service 18.0 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2019-5427
c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.
Mchange C3p0Fedoraproject Fedora 29Fedoraproject Fedora 30Oracle Retail Xstore Point Of Service 15.0Oracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Webcenter Sites 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Webcenter Sites 12.2.1.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Retail Xstore Point Of Service 18.0Oracle Retail Xstore Point Of Service 19.0Oracle Communications Ip Service Activator 7.4.0Oracle Communications Ip Service Activator 7.3.0Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Route ManagerOracle Enterprise Manager Base Platform 13.2.1.0Oracle Documaker
9.8
CVSSv3
CVE-2019-16335
A Polymorphic Typing issue exists in FasterXML jackson-databind prior to 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
Fasterxml Jackson-databindFedoraproject Fedora 30Fedoraproject Fedora 31Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Netapp Steelstore Cloud Integrated Storage -Netapp Oncommand Workflow Automation -Netapp Oncommand Api Services -Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Oracle Retail Xstore Point Of Service 15.0Oracle Banking Platform 2.4.0Oracle Retail Xstore Point Of Service 7.1Oracle Banking Platform 2.4.1Oracle Primavera Gateway 16.1Oracle Primavera Gateway 16.2Oracle Primavera Gateway 15.2Oracle Banking Platform 2.5.0Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Banking Platform 2.6.0
8.1
CVSSv3
CVE-2020-11620
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified ManagerOracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Primavera Unifier 19.12Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Retail Xstore Point Of Service 18.0Oracle Retail Xstore Point Of Service 19.0Oracle Retail Sales Audit 14.1Oracle Communications Evolved Communications Application Server 7.1
9.8
CVSSv3
CVE-2020-9547
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).
Fasterxml Jackson-databindNetapp Active Iq Unified ManagerDebian Debian Linux 8.0Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Primavera Unifier 19.12Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Retail Xstore Point Of Service 18.0Oracle Retail Xstore Point Of Service 19.0Oracle Communications Evolved Communications Application Server 7.1Oracle Communications Network Charging And Control 6.0.1Oracle Jd Edwards Enterpriseone ToolsOracle Jd Edwards Enterpriseone Orchestrator
7.5
CVSSv3
CVE-2019-12402
The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Co...
Apache Commons CompressFedoraproject Fedora 30Fedoraproject Fedora 31Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Retail Xstore Point Of Service 15.0Oracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Retail Integration Bus 15.0Oracle Webcenter Portal 12.2.1.3.0Oracle Flexcube Investor Servicing 12.4.0Oracle Peoplesoft Enterprise Pt Peopletools 8.56Oracle Retail Xstore Point Of Service 16.0Oracle Flexcube Investor Servicing 14.0.0Oracle Retail Integration Bus 16.0Oracle Banking Platform 2.6.2Oracle Flexcube Investor Servicing 14.1.0Oracle Webcenter Portal 12.2.1.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Retail Xstore Point Of Service 18.0Oracle Retail Xstore Point Of Service 19.0Oracle Communications Ip Service Activator 7.4.0
8.1
CVSSv3
CVE-2020-11619
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified ManagerOracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Primavera Unifier 19.12Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Retail Xstore Point Of Service 18.0Oracle Retail Xstore Point Of Service 19.0Oracle Communications Diameter Signaling Router
9.8
CVSSv3
CVE-2019-14540
A Polymorphic Typing issue exists in FasterXML jackson-databind prior to 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
Fasterxml Jackson-databindNetapp Steelstore Cloud Integrated Storage -Netapp Oncommand Workflow Automation -Netapp Oncommand Api Services -Fedoraproject Fedora 30Fedoraproject Fedora 31Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Banking Platform 2.4.0Oracle Retail Xstore Point Of Service 7.1Oracle Banking Platform 2.4.1Oracle Primavera Gateway 16.2Oracle Primavera Gateway 15.2Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0
7.5
CVSSv3
CVE-2019-14439
A Polymorphic Typing issue exists in FasterXML jackson-databind 2.x prior to 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.
Fasterxml Jackson-databindDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 29Fedoraproject Fedora 30Apache Drill 1.16.0Redhat Jboss Middleware Text-only Advisories 1.0Oracle Retail Xstore Point Of Service 15.0Oracle Banking Platform 2.4.0Oracle Retail Xstore Point Of Service 7.1Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Banking Platform 2.4.1Oracle Primavera Gateway 16.1Oracle Primavera Gateway 16.2Oracle Primavera Gateway 15.2Oracle Banking Platform 2.5.0Oracle Retail Xstore Point Of Service 16.0Oracle Jd Edwards Enterpriseone Orchestrator 9.2Oracle Banking Platform 2.6.0Oracle Banking Platform 2.6.1Oracle Retail Customer Management And Segmentation Foundation 17.0
9.8
CVSSv3
CVE-2019-20330
FasterXML jackson-databind 2.x prior to 2.9.10.2 lacks certain net.sf.ehcache blocking.
Fasterxml Jackson-databindOracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Retail Xstore Point Of Service 18.0Oracle Retail Xstore Point Of Service 19.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Global Lifecycle Management OpatchOracle Trace File Analyzer 19c
9.8
CVSSv3
CVE-2019-14379
SubTypeValidator.java in FasterXML jackson-databind prior to 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Service Level Manager -Netapp Active Iq Unified ManagerFedoraproject Fedora 29Fedoraproject Fedora 30Fedoraproject Fedora 31Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Redhat Openshift Container Platform 4.1Redhat Single Sign-on 7.3Redhat Openshift Container Platform 3.11Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Banking Platform 2.4.0Oracle Retail Xstore Point Of Service 7.1Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Banking Platform 2.4.1Oracle Primavera Gateway 16.2Oracle Primavera Gateway 15.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook