What’s Vulnerable › Products
Oracle Corporation Retail Xstore Point of Service vulnerabilities
127 known vulnerabilities, 5 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your Oracle Corporation Retail Xstore Point of Service version is affected
Exploited Oracle Corporation Retail Xstore Point of Service vulnerabilities
- CVE-2021-39144 — XStream Remote Code Execution Vulnerability
- CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
- CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability
- CVE-2017-12617 — Apache Tomcat Remote Code Execution Vulnerability
- CVE-2019-0211 — Apache HTTP Server Privilege Escalation Vulnerability
Latest Oracle Corporation Retail Xstore Point of Service vulnerabilities
- CVE-2026-21954 — (CVSS 4.3)
- CVE-2026-21953 — (CVSS 3.3)
- CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability (CVSS 9.8) — exploited
- CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability (CVSS 9.8) — exploited
- CVE-2021-43859 — Denial of Service by injecting highly recursive collections or maps in XStream (CVSS 7.5)
- CVE-2021-44832 — Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration (CVSS 6.6)
- CVE-2021-39152 — A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling (CVSS 8.5)
- CVE-2021-39150 — A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling (CVSS 8.5)
- CVE-2021-39140 — XStream can cause a Denial of Service (CVSS 6.3)
- CVE-2021-39154 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- CVE-2021-39151 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- CVE-2021-39149 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- CVE-2021-39148 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- CVE-2021-39147 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- CVE-2021-39146 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- CVE-2021-39145 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- CVE-2021-39144 — XStream Remote Code Execution Vulnerability (CVSS 8.5) — exploited
- CVE-2021-39141 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- CVE-2021-39139 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.8)
- CVE-2021-2351 — (CVSS 5.1)
- CVE-2021-36374 — Apache Ant ZIP, and ZIP based, archive denial of service vulerability (CVSS 5.5)
- CVE-2021-36373 — Apache Ant TAR archive denial of service vulnerability (CVSS 5.5)
- CVE-2021-29505 — XStream is vulnerable to a Remote Command Execution attack (CVSS 8.8)
- CVE-2021-29425 — Possible limited path traversal vulnerabily in Apache Commons IO (CVSS 4.8)
- CVE-2021-21351 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.1)