Oracle Retail Order Broker 19.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:retail_order_broker:19.0:*:*:*:*:*:*:*

part: a version: 19.0 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductRetail Order Broker (cb1b91e6-c458-59f4-9bb3-f5be29ee3a2b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10683 vulnerable 2026-06-08 05:16:35.592915 Details available
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.
Published: 2020-05-01T18:55:25.000Z
Updated: 2024-08-04T11:06:11.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13990 vulnerable 2026-06-08 05:12:52.940211 Details available
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.
Published: 2019-07-26T00:00:00.000Z
Updated: 2024-10-15T18:22:20.316Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.