Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle retail order broker 15.0 vulnerabilities and exploits

(subscribe to this query)
1000
VMScore

CVE-2020-9409

The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that theoretically allows an unauthenticated malicious user to ob...
Tibco Jasperreports ServerOracle Retail Order Broker 15.0Oracle Retail Order Broker 16.0
640
VMScore

CVE-2016-3611

Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 15.0 allows remote malicious users to affect confidentiality and integrity via vectors related to System Administration.
Oracle Retail Order Broker Cloud Service 15.0
750
VMScore

CVE-2019-12406

Apache CXF prior to 3.3.4 and 3.2.11 does not restrict the number of message attachments present in a given message. This leaves open the possibility of a denial of service type attack, where a malicious user crafts a message containing a very large number of message attachments....
Apache CxfOracle Commerce Guided Search 11.3.2Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Private Banking 12.1.0Oracle Retail Order Broker 15.0
980
VMScore

CVE-2020-9410

The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a v...
Tibco Jasperreports LibraryTibco Jasperreports Library 7.2.0Tibco Jasperreports Library 7.2.1Tibco Jasperreports Library 7.3.0Tibco Jasperreports Library 7.5.0Tibco Jasperreports ServerTibco Jasperreports Server 7.2.0Tibco Jasperreports Server 7.5.0Oracle Retail Order Broker 15.0Oracle Retail Order Broker 16.0
1000
VMScore

CVE-2019-12419

Apache CXF prior to 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token services, where it does not validate that the authenticated principal is equal to that of the suppli...
Apache CxfOracle Commerce Guided Search 11.3.2Oracle Enterprise Manager Base Platform 13.2.1.0Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Private Banking 12.1.0Oracle Retail Order Broker 15.0
1000
VMScore

CVE-2018-8013

In Apache Batik 1.x prior to 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deser...
Apache BatikDebian Debian Linux 7.0Debian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 14.04Oracle Business Intelligence 11.1.1.7.0Oracle Business Intelligence 11.1.1.9.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Communications Diameter Signaling RouterOracle Communications Metasolv Solution 6.3.0Oracle Communications Webrtc Session Controller
850
VMScore

CVE-2019-17566

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET reques...
Apache BatikOracle Api Gateway 11.1.2.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Communications Application Session Controller 3.9m0p2Oracle Communications Metasolv SolutionOracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Enterprise Repository 11.1.1.7.0Oracle Financial Services Analytical Applications InfrastructureOracle Fusion Middleware Mapviewer 12.2.1.4.0
710
VMScore

CVE-2020-13954

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack via the styleSheetPath, which allows a malicious actor to inject javascript into the web...
Apache CxfNetapp Snap Creator Framework -Netapp Vasa Provider For Clustered Data OntapOracle Business Intelligence 5.5.0.0.0Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Retail Order Broker Cloud Service 15.0Oracle Communications Messaging Server 8.0.2Oracle Communications Messaging Server 8.1
850
VMScore

CVE-2019-12423

Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local keystore (JKS/PKCS12)...
Apache CxfOracle Commerce Guided Search 11.3.2Oracle Communications Diameter Signaling RouterOracle Communications Element ManagerOracle Communications Session Report ManagerOracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Private Banking 12.1.0Oracle Retail Order Broker 15.0
920
VMScore

CVE-2020-11987

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
Apache BatikFedoraproject Fedora 33Fedoraproject Fedora 34Oracle Agile Engineering Data Management 6.2.1.0Oracle Banking Apis 18.3Oracle Banking Apis 19.1Oracle Banking Apis 19.2Oracle Banking Apis 20.1Oracle Banking Apis 21.1Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2
Preferred Score:
VMScore
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-2538CVE-2025-24813CVE-2024-57440CVE-2024-48591kube-apiserverCVE-2025-20014universal traffic recorder appCVE-2025-2557rediscode-projectsspoofbypasslocal
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook