Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle retail xstore point of service 16.0.6 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2021-21343
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new inst...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Banking Platform 2.4.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 11.1.1.9.0Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Policy Management 12.5.0Oracle Webcenter Portal 12.2.1.4.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Banking Virtual Account Management 14.3.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0.0.3.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 11.1.1.9.0
8.1
CVSSv3
CVE-2020-35491
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.
Fasterxml Jackson-databindNetapp Service Level Manager -Debian Debian Linux 9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Banking Platform 2.6.2Oracle Agile Plm 9.3.6Oracle Webcenter Portal 12.2.1.4.0Oracle Sd-wan Edge 9.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Communications Evolved Communications Application Server 7.1Oracle Banking Platform 2.8.0Oracle Banking Virtual Account Management 14.3.0Oracle Insurance Policy Administration J2ee 11.0.2Oracle Communications Unified Inventory Management 7.4.1Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3
7.5
CVSSv3
CVE-2020-11979
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively n...
Apache Ant 1.10.8Gradle GradleFedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Banking Platform 2.4.0Oracle Flexcube Private Banking 12.0.0Oracle Api Gateway 11.1.2.4.0Oracle Banking Platform 2.4.1Oracle Primavera Unifier 16.1Oracle Enterprise Repository 11.1.1.7.0Oracle Retail Predictive Application Server 14.1Oracle Banking Platform 2.6.2Oracle Primavera Unifier 18.8Oracle Data Integrator 12.2.1.3.0Oracle Primavera UnifierOracle Utilities Framework 4.3.0.5.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.4.0
8.1
CVSSv3
CVE-2020-35490
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.
Fasterxml Jackson-databindNetapp Service Level Manager -Debian Debian Linux 9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Banking Platform 2.6.2Oracle Agile Plm 9.3.6Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Communications Evolved Communications Application Server 7.1Oracle Banking Platform 2.8.0Oracle Banking Virtual Account Management 14.3.0Oracle Insurance Policy Administration J2ee 11.2.0Oracle Communications Interactive Session Recorder 6.3Oracle Communications Interactive Session Recorder 6.4Oracle Communications Diameter Signaling RouterOracle Communications Unified Inventory Management 7.4.1Oracle Retail Xstore Point Of Service 16.0.6
8.8
CVSSv3
CVE-2020-26217
XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote malicious user to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Se...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Netapp SnapmanagerNetapp Snapmanager -Apache Activemq 5.15.4Oracle Banking Platform 2.4.0Oracle Communications Policy Management 12.5.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Banking Virtual Account Management 14.3.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Banking Virtual Account Management 14.2.0Oracle Banking Virtual Account Management 14.5.0Oracle Banking Cash Management 14.2Oracle Banking Cash Management 14.3
9.8
CVSSv3
CVE-2021-21347
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user ...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Banking Platform 2.4.0Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 11.1.1.9.0Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Policy Management 12.5.0Oracle Weblogic Server 12.2.1.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0
8.6
CVSSv3
CVE-2021-21349
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote malicious user to request data from internal resources that are not publicly available only by manipulating the processed inpu...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Banking Platform 2.4.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 11.1.1.9.0Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Policy Management 12.5.0Oracle Webcenter Portal 12.2.1.4.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Banking Virtual Account Management 14.3.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0.0.3.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 11.1.1.9.0
9.8
CVSSv3
CVE-2021-21350
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote malicious user to execute arbitrary code only by manipulating the processed input stream. No user is affected, who followed th...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Banking Platform 2.4.0Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 11.1.1.9.0Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Policy Management 12.5.0Oracle Weblogic Server 12.2.1.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0
6.3
CVSSv3
CVE-2020-1945
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory bac...
Apache AntCanonical Ubuntu Linux 19.10Fedoraproject Fedora 31Fedoraproject Fedora 32Opensuse Leap 15.2Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Retail Integration Bus 14.1Oracle Flexcube Private Banking 12.0.0Oracle Retail Store Inventory Management 14.1Oracle Primavera Unifier 16.1Oracle Enterprise Repository 11.1.1.7.0Oracle Retail Service Backbone 15.0Oracle Retail Integration Bus 15.0Oracle Retail Back Office 14.1Oracle Retail Back Office 14.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 2.2.0.0.0Oracle Flexcube Investor Servicing 12.4.0
7.5
CVSSv3
CVE-2020-25649
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.
Fasterxml Jackson-databindNetapp Oncommand Workflow Automation -Netapp Service Level Manager -Netapp Oncommand Api Services -Fedoraproject Fedora 32Quarkus QuarkusApache IotdbOracle Webcenter Portal 12.2.1.3.0Oracle Banking Platform 2.6.2Oracle Utilities Framework 4.3.0.5.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Agile Plm 9.3.6Oracle Coherence 12.2.1.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Sd-wan Edge 9.0Oracle Coherence 14.1.1.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Services Gatekeeper 7.0Oracle Banking Platform 2.7.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook