Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle retail order broker cloud service 15.0 vulnerabilities and exploits

(subscribe to this query)
5.8
CVSSv2

CVE-2016-3611

Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 15.0 allows remote malicious users to affect confidentiality and integrity via vectors related to System Administration.
Oracle Retail Order Broker Cloud Service 15.0
4.3
CVSSv2

CVE-2020-13954

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack via the styleSheetPath, which allows a malicious actor to inject javascript into the web...
Apache CxfNetapp Snap Creator Framework -Netapp Vasa Provider For Clustered Data OntapOracle Business Intelligence 5.5.0.0.0Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Retail Order Broker Cloud Service 15.0Oracle Communications Messaging Server 8.0.2Oracle Communications Messaging Server 8.1
5
CVSSv2

CVE-2019-17566

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET reques...
Apache BatikOracle Api Gateway 11.1.2.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Communications Application Session Controller 3.9m0p2Oracle Communications Metasolv SolutionOracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Enterprise Repository 11.1.1.7.0Oracle Financial Services Analytical Applications InfrastructureOracle Fusion Middleware Mapviewer 12.2.1.4.0
9
CVSSv2

CVE-2016-0635

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle...
Oracle DocumakerOracle Enterprise Manager Ops Center 12.1.4Oracle Enterprise Manager Ops Center 12.2.2Oracle Enterprise Manager Ops Center 12.3.2Oracle Health Sciences Information Manager 1.2.8.3Oracle Health Sciences Information Manager 2.0.2.3Oracle Health Sciences Information Manager 3.0.1.0Oracle Healthcare Master Person Index 2.0.12Oracle Healthcare Master Person Index 3.0.0Oracle Healthcare Master Person Index 4.0.1Oracle Insurance Calculation Engine 9.7.1Oracle Insurance Calculation Engine 10.1.2
4.3
CVSSv2

CVE-2020-9488

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
Apache Log4jOracle Communications Application Session Controller 3.9m0p1Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Services Gatekeeper 7.0Oracle Communications Unified Inventory Management 7.3.0Oracle Communications Unified Inventory Management 7.4.0Oracle Data Integrator 12.2.1.3.0Oracle Data Integrator 12.2.1.4.0Oracle Enterprise Manager For Peoplesoft 13.4.1.1
6.4
CVSSv2

CVE-2020-11987

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
Apache BatikFedoraproject Fedora 33Fedoraproject Fedora 34Oracle Agile Engineering Data Management 6.2.1.0Oracle Banking Apis 18.3Oracle Banking Apis 19.1Oracle Banking Apis 19.2Oracle Banking Apis 20.1Oracle Banking Apis 21.1Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2
7.6
CVSSv2

CVE-2020-5398

In Spring Framework, versions 5.2.x before 5.2.3, versions 5.1.x before 5.1.13, and versions 5.0.x before 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attrib...
Vmware Spring FrameworkOracle Application Testing Suite 13.3.0.1Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Communications Cloud Native Core Policy 1.5.0Oracle Communications Diameter Signaling RouterOracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Policy Management 12.5.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0
7.5
CVSSv2

CVE-2019-13990

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler up to and including 2.3.0 allows XXE attacks via a job description.
Softwareag QuartzOracle Apache Batik Mapviewer 12.2.0.1Oracle Apache Batik Mapviewer 18cOracle Apache Batik Mapviewer 19cOracle Banking Enterprise Originations 2.7.0Oracle Banking Enterprise Originations 2.8.0Oracle Banking Enterprise Product Manufacturing 2.7.0Oracle Banking Enterprise Product Manufacturing 2.8.0Oracle Banking PaymentsOracle Communications Ip Service Activator 7.3.0Oracle Communications Ip Service Activator 7.4.0Oracle Communications Session Route Manager
4.3
CVSSv2

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Redhat Hibernate ValidatorRedhat Hibernate Validator 6.1.0Redhat Fuse 1.0Redhat Jboss Data Grid -Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Snapcenter Plug-in -
4.4
CVSSv2

CVE-2020-9484

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; a...
Apache TomcatApache Tomcat 9.0.0Apache Tomcat 10.0.0Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.1Fedoraproject Fedora 31Fedoraproject Fedora 32Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 20.04Oracle Agile Engineering Data Management 6.2.1.0
Preferred Score:
CVSSv2
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-1496go-redisCVE-2025-24472physicalelevation of privilegeCVE-2025-30066local file inclusionCVE-2025-2553ollama/ollamaCVE-2024-13920ollamalanggenius/difyCVE-2025-0313
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook