Oracle Retail Advanced Inventory Planning 14.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:retail_advanced_inventory_planning:14.1:*:*:*:*:*:*:*

part: a version: 14.1 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductRetail Advanced Inventory Planning (f3bdf9bb-5b2e-5950-b6ec-81ab07cebcdc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-36374 vulnerable 2026-06-08 05:32:52.163158 Apache Ant ZIP, and ZIP based, archive denial of service vulerability
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.
Published: 2021-07-14T06:20:12.000Z
Updated: 2024-08-04T00:54:51.456Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36373 vulnerable 2026-06-08 05:32:52.115698 Apache Ant TAR archive denial of service vulnerability
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.
Published: 2021-07-14T06:20:11.000Z
Updated: 2024-08-04T00:54:51.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9488 vulnerable 2026-06-08 05:28:01.956165 Details available
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
Published: 2020-04-27T15:36:10.000Z
Updated: 2026-05-29T16:07:52.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1945 vulnerable 2026-06-08 05:21:03.659056 Details available
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.
Published: 2020-05-14T15:57:34.000Z
Updated: 2024-08-04T06:54:00.377Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11979 vulnerable 2026-06-08 05:17:55.949029 Details available
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
Published: 2020-10-01T19:24:57.000Z
Updated: 2024-08-04T11:48:57.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10086 vulnerable 2026-06-08 05:12:22.183524 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12617 vulnerable 2026-06-08 05:08:47.301022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.