Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:retail_service_backbone:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductRetail Service Backbone (a50bf5f6-0f6f-58e3-a6ad-82e1d15536d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-45105 vulnerable 2026-06-08 05:36:47.963305 Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.
Published: 2021-12-18T11:55:08.000Z
Updated: 2026-05-29T11:45:26.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29425 vulnerable 2026-06-08 05:31:26.327489 Possible limited path traversal vulnerabily in Apache Commons IO
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.
Published: 2021-04-13T06:50:12.000Z
Updated: 2024-08-03T22:02:51.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36184 vulnerable 2026-06-08 05:25:02.612873 Details available
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.
Published: 2021-01-06T22:30:07.000Z
Updated: 2024-08-04T17:23:09.423Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36182 vulnerable 2026-06-08 05:25:02.601020 Details available
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.
Published: 2021-01-06T22:30:22.000Z
Updated: 2024-08-04T17:23:09.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36181 vulnerable 2026-06-08 05:25:02.589894 Details available
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.
Published: 2021-01-06T22:29:19.000Z
Updated: 2024-08-04T17:23:09.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36180 vulnerable 2026-06-08 05:25:02.568494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36179 vulnerable 2026-06-08 05:25:02.560119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11113 vulnerable 2026-06-08 05:16:36.469853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11112 vulnerable 2026-06-08 05:16:36.467188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11111 vulnerable 2026-06-08 05:16:36.464825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10969 vulnerable 2026-06-08 05:16:36.119041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10968 vulnerable 2026-06-08 05:16:36.116521 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10673 vulnerable 2026-06-08 05:16:35.541929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10672 vulnerable 2026-06-08 05:16:35.512930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10219 vulnerable 2026-06-08 05:12:22.776720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.