Oracle Retail Predictive Application Server 16.0.3.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.0:*:*:*:*:*:*:*

part: a version: 16.0.3.0 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductRetail Predictive Application Server (f3429c24-b899-5a53-a178-5774e43293b9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-36374 vulnerable 2026-06-08 05:32:52.164409 Apache Ant ZIP, and ZIP based, archive denial of service vulerability
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.
Published: 2021-07-14T06:20:12.000Z
Updated: 2024-08-04T00:54:51.456Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36373 vulnerable 2026-06-08 05:32:52.138322 Apache Ant TAR archive denial of service vulnerability
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.
Published: 2021-07-14T06:20:11.000Z
Updated: 2024-08-04T00:54:51.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9488 vulnerable 2026-06-08 05:28:01.985155 Details available
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
Published: 2020-04-27T15:36:10.000Z
Updated: 2026-05-29T16:07:52.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5398 vulnerable 2026-06-08 05:26:42.766297 RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
HIGH (8)
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
Published: 2020-01-16T23:55:15.596Z
Updated: 2024-09-16T17:43:32.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5397 vulnerable 2026-06-08 05:26:42.743776 CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux
MEDIUM (5.3)
Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable because preflight requests should not include credentials and therefore requests should fail authentication. However a notable exception to this are Chrome based browsers when using client certificates for authentication since Chrome sends TLS client certificates in CORS preflight requests in violation of spec requirements. No HTTP body can be sent or received as a result of this attack.
Published: 2020-01-17T18:50:12.742Z
Updated: 2024-09-17T01:45:35.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1945 vulnerable 2026-06-08 05:21:03.688100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3740 vulnerable 2026-06-08 05:13:55.848759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3739 vulnerable 2026-06-08 05:13:55.835894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3738 vulnerable 2026-06-08 05:13:55.827367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15769 vulnerable 2026-06-08 05:11:03.576999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11058 vulnerable 2026-06-08 05:10:37.785554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11057 vulnerable 2026-06-08 05:10:37.779411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11056 vulnerable 2026-06-08 05:10:37.777717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11055 vulnerable 2026-06-08 05:10:37.773425 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.