Oracle Retail Service Backbone 15.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:retail_service_backbone:15.0:*:*:*:*:*:*:*

part: a version: 15.0 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductRetail Service Backbone (a50bf5f6-0f6f-58e3-a6ad-82e1d15536d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9546 vulnerable 2026-06-08 05:28:02.293120 Details available
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).
Published: 2020-03-02T03:59:18.000Z
Updated: 2024-08-04T10:34:39.829Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5398 vulnerable 2026-06-08 05:26:42.766444 RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
HIGH (8)
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
Published: 2020-01-16T23:55:15.596Z
Updated: 2024-09-16T17:43:32.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5397 vulnerable 2026-06-08 05:26:42.745425 CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux
MEDIUM (5.3)
Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable because preflight requests should not include credentials and therefore requests should fail authentication. However a notable exception to this are Chrome based browsers when using client certificates for authentication since Chrome sends TLS client certificates in CORS preflight requests in violation of spec requirements. No HTTP body can be sent or received as a result of this attack.
Published: 2020-01-17T18:50:12.742Z
Updated: 2024-09-17T01:45:35.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1945 vulnerable 2026-06-08 05:21:03.692542 Details available
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.
Published: 2020-05-14T15:57:34.000Z
Updated: 2024-08-04T06:54:00.377Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11113 vulnerable 2026-06-08 05:16:36.470398 Details available
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
Published: 2020-03-31T04:37:27.000Z
Updated: 2025-08-27T20:32:51.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11112 vulnerable 2026-06-08 05:16:36.467753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10969 vulnerable 2026-06-08 05:16:36.119640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10968 vulnerable 2026-06-08 05:16:36.117145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10673 vulnerable 2026-06-08 05:16:35.542531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10672 vulnerable 2026-06-08 05:16:35.534693 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3740 vulnerable 2026-06-08 05:13:55.848798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3739 vulnerable 2026-06-08 05:13:55.835930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3738 vulnerable 2026-06-08 05:13:55.828503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17571 vulnerable 2026-06-08 05:13:10.754985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17091 vulnerable 2026-06-08 05:13:09.904927 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15756 vulnerable 2026-06-08 05:11:03.531794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5645 vulnerable 2026-06-08 05:09:47.566052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5475 vulnerable 2026-06-08 05:07:57.085850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5474 vulnerable 2026-06-08 05:07:57.085248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3253 vulnerable 2026-06-08 05:06:37.818713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.