Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle retail customer management and segmentation foundation 18.0 vulnerabilities and exploits

(subscribe to this query)
580
VMScore

CVE-2020-2567

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Security). The supported version that is affected is 18.0. Easily exploitable vulnerability allows high privileged attacker with network access via...
Oracle Retail Customer Management And Segmentation Foundation 18.0
1000
VMScore

CVE-2020-2953

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promotions). The supported version that is affected is 18.0. Easily exploitable vulnerability allows unauthenticated attacker with network access v...
Oracle Retail Customer Management And Segmentation Foundation 18.0
410
VMScore

CVE-2020-14731

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment). Supported versions that are affected are 18.0 and 19.0. Difficult to exploit vulnerability allows low privileged attacker with network ac...
Oracle Retail Customer Management And Segmentation Foundation 18.0Oracle Retail Customer Management And Segmentation Foundation 19.0
530
VMScore

CVE-2020-14708

Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment). Supported versions that are affected are 16.0, 17.0 and 18.0. Easily exploitable vulnerability allows low privileged attacker with network access via H...
Oracle Retail Customer Management And Segmentation Foundation 16.0Oracle Retail Customer Management And Segmentation Foundation 17.0Oracle Retail Customer Management And Segmentation Foundation 18.0
810
VMScore

CVE-2020-14709

Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Card). Supported versions that are affected are 16.0, 17.0 and 18.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP...
Oracle Retail Customer Management And Segmentation Foundation 16.0Oracle Retail Customer Management And Segmentation Foundation 17.0Oracle Retail Customer Management And Segmentation Foundation 18.0
640
VMScore

CVE-2020-14710

Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Security). Supported versions that are affected are 16.0, 17.0 and 18.0. Easily exploitable vulnerability allows low privileged attacker with network access via ...
Oracle Retail Customer Management And Segmentation Foundation 16.0Oracle Retail Customer Management And Segmentation Foundation 17.0Oracle Retail Customer Management And Segmentation Foundation 18.0
1000
VMScore

CVE-2019-3772

Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
Vmware Spring IntegrationOracle Retail Customer Management And Segmentation Foundation 16.0Oracle Retail Customer Management And Segmentation Foundation 17.0Oracle Retail Customer Management And Segmentation Foundation 18.0
750
VMScore

CVE-2021-30129

A vulnerability in sshd-core of Apache Mina SSHD allows an malicious user to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0
Apache SshdOracle Banking Payments 14.5Oracle Banking Trade Finance 14.5Oracle Banking Treasury Management 14.5Oracle Communications Cloud Native Core Console 1.9.0Oracle Flexcube Universal BankingOracle Flexcube Universal Banking 14.5Oracle Middleware Common Libraries And Tools 12.2.1.3.0Oracle Middleware Common Libraries And Tools 12.2.1.4.0Oracle Middleware Common Libraries And Tools 14.1.1.0.0Oracle Oss Support Tools 2.12.42Oracle Retail Customer Management And Segmentation Foundation 18.0
1000
VMScore

CVE-2020-10683

dom4j prior to 2.0.3 and 2.1.x prior to 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j...
Dom4j Project Dom4jOracle Agile Plm 9.3.3Oracle Agile Plm 9.3.5Oracle Application Testing Suite 13.3.0.1Oracle Banking PlatformOracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Application Session Controller 3.9m0p1Oracle Communications Diameter Signaling RouterOracle Communications Unified Inventory Management 7.3.0Oracle Communications Unified Inventory Management 7.4.0Oracle Data Integrator 12.2.1.3.0
470
VMScore

CVE-2020-9488

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
Apache Log4jOracle Communications Application Session Controller 3.9m0p1Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Services Gatekeeper 7.0Oracle Communications Unified Inventory Management 7.3.0Oracle Communications Unified Inventory Management 7.4.0Oracle Data Integrator 12.2.1.3.0Oracle Data Integrator 12.2.1.4.0Oracle Enterprise Manager For Peoplesoft 13.4.1.1
Preferred Score:
VMScore
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-30214logic flawslider by 10webCVE-2025-29927CVE-2025-2736firewallip based loginCVE-2025-30212estatebudCVE-2022-1804brute forcejob postingsCVE-2025-24514
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook