Oracle Retail Merchandising System 16.0
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:retail_merchandising_system:16.0:*:*:*:*:*:*:*
part: a version: 16.0 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Retail Merchandising System (a724f049-610f-528b-ad22-cb230be638dc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-17091 |
vulnerable | 2026-06-08 05:13:09.903957 |
Details available
faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.
Published: 2019-10-02T13:58:49.000Z
Updated: 2024-08-05T01:33:16.741Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2730 |
vulnerable | 2026-06-08 05:11:37.834645 |
Details available
Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications (subcomponent: Cross Pillar). The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Merchandising System. While the vulnerability is in Oracle Retail Merchandising System, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Merchandising System accessible data as well as unauthorized read access to a subset of Oracle Retail Merchandising System accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).
Published: 2018-01-18T02:00:00.000Z
Updated: 2024-10-03T20:25:15.077Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14721 |
vulnerable | 2026-06-08 05:10:53.380887 |
Details available
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T09:38:13.150Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14720 |
vulnerable | 2026-06-08 05:10:53.375810 |
Details available
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T09:38:13.593Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14719 |
vulnerable | 2026-06-08 05:10:53.363558 |
Details available
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T09:38:13.192Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14718 |
vulnerable | 2026-06-08 05:10:53.351143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.