Oracle Retail Assortment Planning 16.0.3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:retail_assortment_planning:16.0.3.0:*:*:*:*:*:*:*
part: a version: 16.0.3.0 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Retail Assortment Planning (c813c0a3-cb9d-5fe1-84bd-67adee9ccace) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-9488 |
vulnerable | 2026-06-08 05:28:01.957717 |
Details available
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
Published: 2020-04-27T15:36:10.000Z
Updated: 2026-05-29T16:07:52.931Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5421 |
vulnerable | 2026-06-08 05:26:42.859913 |
RFD Protection Bypass via jsessionid
HIGH (8.7)
In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.
Published: 2020-09-19T03:45:13.127Z
Updated: 2024-09-17T03:58:43.873Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3740 |
vulnerable | 2026-06-08 05:13:55.847113 |
Details available
MEDIUM (6.5)
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.
Published: 2019-09-18T22:23:10.138Z
Updated: 2024-09-17T01:40:53.233Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3739 |
vulnerable | 2026-06-08 05:13:55.835787 |
Details available
MEDIUM (6.5)
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.
Published: 2019-09-18T22:23:10.098Z
Updated: 2024-09-16T17:43:20.591Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3738 |
vulnerable | 2026-06-08 05:13:55.822242 |
Details available
MEDIUM (6.5)
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key.
Published: 2019-09-18T22:23:10.057Z
Updated: 2024-09-16T19:01:44.507Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-2904 |
vulnerable | 2026-06-08 05:13:54.588553 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.