Latest vulnerabilities for "oracle retail xstore point of service" 19.0.2

9.9

First published (updated )

CVE-2021-21345

Oracle Banking PlatformFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36189

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.8

First published (updated )

CVE-2021-21350

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.8

First published (updated )

CVE-2021-21346

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.8

First published (updated )

CVE-2021-21347

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.8

First published (updated )

CVE-2021-21344

Apache Log4jApache log4j2 log messages substitution (CVE-2021-44228)

9.8

Zeroday

First published (updated )

CVE-2021-44832

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36188

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36180

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36182

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36183

Oracle Primavera GatewayFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36179

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36185

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36181

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36186

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36184

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36187

Oracle Retail Xstore Point of ServiceA website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the m…

9.8

First published (updated )

CVE-2019-0219

Oracle Retail Xstore Point of ServiceRemote Code Execution in XStream

9.3

First published (updated )

CVE-2020-26217

Oracle MySQL ClusterInteger Underflow, Buffer Overflow

9.3

First published (updated )

CVE-2020-8174

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Communications Unified Inventory ManagementA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

9.1

First published (updated )

CVE-2021-21342

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.1

First published (updated )

CVE-2021-21351

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.8

First published (updated )

CVE-2021-39139

Oracle Communications Unified Inventory ManagementXStream is vulnerable to a Remote Command Execution attack

8.8

First published (updated )

CVE-2021-29505

Oracle Retail Xstore Point of ServiceRFD Protection Bypass via jsessionid

8.7

First published (updated )

CVE-2020-5421

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Communications Unified Inventory ManagementA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

8.6

First published (updated )

CVE-2021-21349

Oracle Utilities FrameworkXStream Remote Code Execution Vulnerability

8.5

Exploited

First published (updated )

CVE-2021-39144

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39147

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39151

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39148

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.