Oracle Retail Price Management 14.0

CPE Details

Oracle Retail Price Management 14.0
14.0
2021-09-02
15h32 +00:00
2021-09-07
13h46 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:oracle:retail_price_management:14.0:*:*:*:*:*:*:*

Informations

Vendor

oracle

Product

retail_price_management

Version

14.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2019-10086 2019-08-20
18h10 +00:00
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
7.3
High
CVE-2017-12617 2017-10-03
15h00 +00:00
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
8.1
High