Oracle Retail Price Management 13.2
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:retail_price_management:13.2:*:*:*:*:*:*:*
part: a version: 13.2 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Retail Price Management (37994905-7666-5770-a933-47f8025489ae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-45105 |
vulnerable | 2026-06-08 05:36:47.959494 |
Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.
Published: 2021-12-18T11:55:08.000Z
Updated: 2026-05-29T11:45:26.064Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10219 |
vulnerable | 2026-06-08 05:12:22.772230 |
Details available
MEDIUM (6.5)
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Published: 2019-11-08T14:46:03.000Z
Updated: 2025-07-07T13:55:51.360Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12617 |
vulnerable | 2026-06-08 05:08:47.322915 |
Details available
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Published: 2017-10-03T15:00:00.000Z
Updated: 2025-10-21T23:55:32.381Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.