Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle retail xstore point of service 19.0.2 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2019-0219
A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI.
Apache Cordova InappbrowserOracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2
8.1
CVSSv3
CVE-2020-8174
napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.
Nodejs Node.jsOracle Banking Extensibility Workbench 14.4.0Oracle Banking Extensibility Workbench 14.3.0Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Retail Xstore Point Of Service 20.0.1Oracle Mysql ClusterOracle Blockchain PlatformNetapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -
7.5
CVSSv3
CVE-2020-8277
A Node.js application that allows an malicious user to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. ...
Nodejs Node.jsFedoraproject Fedora 32Fedoraproject Fedora 33Oracle Graalvm 19.3.4Oracle Graalvm 20.3.0Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Jd Edwards Enterpriseone ToolsOracle Mysql ClusterOracle Blockchain PlatformC-ares Project C-ares
7.5
CVSSv3
CVE-2021-43859
XStream is an open source java library to serialize objects to XML and back again. Versions before 1.4.19 may allow a remote malicious user to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of servic...
Xstream Project XstreamFedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Oracle Flexcube Private Banking 12.1.0Oracle Commerce Guided Search 11.3.2Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Automated Test Suite 1.9.0Oracle Communications Policy Management 12.6.0.0.0Oracle Communications Diameter Intelligence HubOracle Communications Brm - Elastic Charging Engine 12.0.0.5.0Oracle Communications Brm - Elastic Charging Engine
5.5
CVSSv3
CVE-2021-27807
A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
Apache PdfboxFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Hyperion Financial Reporting 11.1.2.4Oracle Webcenter Sites 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Flexcube Universal BankingOracle Outside In Technology 8.5.5Oracle Primavera Unifier 19.12Oracle Webcenter Sites 12.2.1.4.0Oracle Retail Customer Management And Segmentation Foundation 19.0Oracle Primavera Unifier 20.12Oracle Banking Virtual Account Management 14.3.0Oracle Banking Trade Finance Process Management 14.3.0Oracle Communications Messaging Server 8.1Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Retail Xstore Point Of Service 20.0.1
5.5
CVSSv3
CVE-2021-36373
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant before 1.9.16 and 1.10.11 were aff...
Apache AntOracle Retail Store Inventory Management 14.1Oracle Enterprise Repository 11.1.1.7.0Oracle Retail Back Office 14.1Oracle Retail Back Office 14.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Retail Central Office 14.0Oracle Retail Central Office 14.1Oracle Primavera Unifier 18.8Oracle Retail Point-of-service 14.1Oracle Retail Point-of-service 14.0Oracle Retail Predictive Application Server 15.0.3Oracle Primavera UnifierOracle Utilities Framework 4.4.0.0.0Oracle Agile Plm 9.3.6Oracle Communications Unified Inventory Management 7.4.0Oracle Retail Store Inventory Management 16.0Oracle Primavera Unifier 19.12Oracle Utilities FrameworkOracle Utilities Framework 4.4.0.2.0Oracle Communications Unified Inventory Management 7.3.0
7.5
CVSSv3
CVE-2021-21341
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote malicious user to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resu...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Banking Platform 2.4.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 11.1.1.9.0Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0.0.3.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Unified Inventory Management 7.4.1
8.5
CVSSv3
CVE-2021-39145
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who follow...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Commerce Guided Search 11.3.2
8.5
CVSSv3
CVE-2021-39146
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who follow...
Xstream Project XstreamFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Retail Xstore Point Of Service 17.0.2Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Business Activity Monitoring 12.2.1.4.0
8.5
CVSSv3
CVE-2021-39148
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who follow...
Xstream Project XstreamFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Commerce Guided Search 11.3.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook