Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
oracle retail applications 13.0 vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2015-0466
Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote malicious users to affect integrity via unknown vectors.
Oracle Retail Applications 12.0
Oracle Retail Applications 12.0in
Oracle Retail Applications 13.0
Oracle Retail Applications 13.1
Oracle Retail Applications 13.2
Oracle Retail Applications 13.3
Oracle Retail Applications 13.4
Oracle Retail Applications 14.0
Oracle Retail Applications 14.1
356
VMScore
CVE-2013-1525
Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Industry Applications 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Retail Integration Bus Manager.
Oracle Industry Applications 13.0
Oracle Industry Applications 13.1
Oracle Industry Applications 13.2
490
VMScore
CVE-2013-3814
Unspecified vulnerability in the Oracle Retail Invoice Matching component in Oracle Industry Applications 10.2, 11.0, 12.0, 12.0IN, 12.1, 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to System Administr...
Oracle Industry Applications 10.2.0
Oracle Industry Applications 11.0
Oracle Industry Applications 12.0
Oracle Industry Applications 12.1
Oracle Industry Applications 13.0
Oracle Industry Applications 13.1
Oracle Industry Applications 13.2
676
VMScore
CVE-2017-3254
Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 12.0 and 13.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP ...
Oracle Retail Invoice Matching 12.0
Oracle Retail Invoice Matching 13.0
756
VMScore
CVE-2014-0050
MultipartStream.java in Apache Commons FileUpload prior to 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote malicious users to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's ...
Oracle Retail Applications 12.0
Oracle Retail Applications 12.0in
Oracle Retail Applications 13.0
Oracle Retail Applications 13.1
Oracle Retail Applications 13.2
Oracle Retail Applications 13.3
Oracle Retail Applications 13.4
Oracle Retail Applications 14.0
Apache Commons Fileupload
Apache Commons Fileupload 1.0
Apache Commons Fileupload 1.1
Apache Commons Fileupload 1.1.1
1 EDB exploit
2 Github repositories
676
VMScore
CVE-2016-5476
Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
Oracle Retail Integration Bus 13.0
Oracle Retail Integration Bus 13.1
Oracle Retail Integration Bus 13.2
Oracle Retail Integration Bus 14.0
Oracle Retail Integration Bus 14.1
Oracle Retail Integration Bus 15.0
872
VMScore
CVE-2016-3444
Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote malicious users to affect confidentiality, integrity, and availability via vectors related to Install.
Oracle Retail Integration Bus 13.0
Oracle Retail Integration Bus 13.1
Oracle Retail Integration Bus 13.2
Oracle Retail Integration Bus 14.0
Oracle Retail Integration Bus 14.1
Oracle Retail Integration Bus 15.0
668
VMScore
CVE-2018-15756
Spring Framework, version 5.1, versions 5.0.x before 5.0.10, versions 4.3.x before 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annota...
Vmware Spring Framework
Vmware Spring Framework 5.1.0
Oracle Agile Plm 9.3.3
Oracle Agile Plm 9.3.4
Oracle Agile Plm 9.3.5
Oracle Agile Plm 9.3.6
Oracle Communications Brm - Elastic Charging Engine 11.3
Oracle Communications Brm - Elastic Charging Engine 12.0
Oracle Communications Converged Application Server - Service Controller 6.0
Oracle Communications Converged Application Server - Service Controller 6.1
Oracle Communications Diameter Signaling Router 8.0.0
Oracle Communications Diameter Signaling Router 8.1
827
VMScore
CVE-2017-12617
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a...
Apache Tomcat
Canonical Ubuntu Linux 12.04
Canonical Ubuntu Linux 16.04
Canonical Ubuntu Linux 17.10
Canonical Ubuntu Linux 18.04
Oracle Agile Plm 9.3.3
Oracle Agile Plm 9.3.4
Oracle Agile Plm 9.3.5
Oracle Agile Plm 9.3.6
Oracle Communications Instant Messaging Server 10.0.1
Oracle Endeca Information Discovery Integrator 3.1.0
Oracle Endeca Information Discovery Integrator 3.2.0
2 EDB exploits
16 Github repositories
428
VMScore
CVE-2021-29425
In Apache Commons IO prior to 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not furt...
Apache Commons Io 2.2
Apache Commons Io 2.3
Apache Commons Io 2.4
Apache Commons Io 2.5
Apache Commons Io 2.6
Debian Debian Linux 9.0
Oracle Access Manager 11.1.2.3.0
Oracle Access Manager 12.2.1.3.0
Oracle Access Manager 12.2.1.4.0
Oracle Agile Engineering Data Management 6.2.1.0
Oracle Agile Plm 9.3.6
Oracle Application Performance Management 13.4.1.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-12326
CVE-2024-44852
XSS
privilege escalation
CSRF
CVE-2024-12115
CVE-2024-38925
CVE-2024-38144
CVE-2024-6387
Home
/
Search Results
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »