Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:16.0:*:*:*:*:*:*:*

part: a version: 16.0 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductRetail Customer Management And Segmentation Foundation (31194e69-a74e-5463-b744-f28b39573fda)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9488 vulnerable 2026-06-08 05:28:01.967211 Details available
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
Published: 2020-04-27T15:36:10.000Z
Updated: 2026-05-29T16:07:52.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2650 vulnerable 2026-06-08 05:24:59.801834 Details available
MEDIUM (6.5)
Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promotions). The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Customer Management and Segmentation Foundation accessible data as well as unauthorized read access to a subset of Oracle Retail Customer Management and Segmentation Foundation accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).
Published: 2020-01-15T16:34:05.000Z
Updated: 2024-09-30T15:59:56.453Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2649 vulnerable 2026-06-08 05:24:59.801198 Details available
LOW (3.3)
Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Internal Operations). The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Retail Customer Management and Segmentation Foundation executes to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Retail Customer Management and Segmentation Foundation accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Published: 2020-01-15T16:34:05.000Z
Updated: 2024-09-30T16:00:07.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2648 vulnerable 2026-06-08 05:24:59.800653 Details available
MEDIUM (6.2)
Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Internal Operations). The supported version that is affected is 16.0. Easily exploitable vulnerability allows physical access to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in takeover of Oracle Retail Customer Management and Segmentation Foundation. CVSS 3.0 Base Score 6.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Published: 2020-01-15T16:34:05.000Z
Updated: 2024-09-30T14:51:44.351Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14710 vulnerable 2026-06-08 05:19:24.432255 Details available
MEDIUM (5.4)
Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Security). Supported versions that are affected are 16.0, 17.0 and 18.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Customer Management and Segmentation Foundation accessible data as well as unauthorized read access to a subset of Customer Management and Segmentation Foundation accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).
Published: 2020-07-15T17:34:35.000Z
Updated: 2024-09-26T20:38:19.772Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14709 vulnerable 2026-06-08 05:19:24.431614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14708 vulnerable 2026-06-08 05:19:24.429498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10683 vulnerable 2026-06-08 05:16:35.586640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3772 vulnerable 2026-06-08 05:13:55.963597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3316 vulnerable 2026-06-08 05:11:38.981319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3315 vulnerable 2026-06-08 05:11:38.980238 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.