Oracle Retail Service Backbone 15.0.3

CPE Details

Oracle Retail Service Backbone 15.0.3
oracle
retail_service_backbone
15.0.3
2021-02-11
19h02 +00:00
2021-05-04
15h37 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:oracle:retail_service_backbone:15.0.3:*:*:*:*:*:*:*

Informations

Vendor

oracle

Product

retail_service_backbone

Version

15.0.3

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2020-11979 2020-10-01 17h24 +00:00 As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
7.5
Haute
CVE-2020-5421 2020-09-19 03h45 +00:00 In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.
6.5
Moyen