Oracle Retail Financial Integration 15.0.3
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:retail_financial_integration:15.0.3:*:*:*:*:*:*:*
part: a version: 15.0.3 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Retail Financial Integration (f5b00d80-0da5-56de-b8a9-420adb6175d2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-5421 |
vulnerable | 2026-06-08 05:26:42.862859 |
RFD Protection Bypass via jsessionid
HIGH (8.7)
In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.
Published: 2020-09-19T03:45:13.127Z
Updated: 2024-09-17T03:58:43.873Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11979 |
vulnerable | 2026-06-08 05:17:55.965174 |
Details available
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
Published: 2020-10-01T19:24:57.000Z
Updated: 2024-08-04T11:48:57.549Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.