What’s Vulnerable › Products
Oracle Retail Service Backbone vulnerabilities
45 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.
Check whether your Oracle Retail Service Backbone version is affected
Latest Oracle Retail Service Backbone vulnerabilities
- CVE-2022-23437 — Infinite loop within Apache XercesJ xml parser (CVSS 6.5)
- CVE-2021-45105 — Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVSS 5.9)
- CVE-2021-40690 — Bypass of the secureValidation property (CVSS 7.5)
- CVE-2021-2351 — (CVSS 5.1)
- CVE-2021-36374 — Apache Ant ZIP, and ZIP based, archive denial of service vulerability (CVSS 5.5)
- CVE-2021-36373 — Apache Ant TAR archive denial of service vulnerability (CVSS 5.5)
- CVE-2021-29425 — Possible limited path traversal vulnerabily in Apache Commons IO (CVSS 4.8)
- CVE-2020-13936 — Velocity Sandbox Bypass (CVSS 8.8)
- CVE-2020-36183 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36182 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36180 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36179 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36189 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36188 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36187 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36186 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36185 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36184 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36181 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-35728 — Serialization gadget exploit in jackson-databind (CVSS 8.1)
- CVE-2020-25649 — XML External Entity (XXE) Injection in Jackson Databind (CVSS 7.5)
- CVE-2020-11979 — (CVSS 7.5)
- CVE-2020-5421 — RFD Protection Bypass via jsessionid (CVSS 6.5)
- CVE-2020-1945 — (CVSS 6.3)
- CVE-2020-11113 — jackson-databind mishandles the interaction between serialization gadgets and typing (CVSS 8.8)