Oracle Retail Financial Integration 14.1.3

CPE Details

Oracle Retail Financial Integration 14.1.3
oracle
retail_financial_integration
14.1.3
2021-02-11
19h02 +00:00
2021-05-04
15h37 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:oracle:retail_financial_integration:14.1.3:*:*:*:*:*:*:*

Informations

Vendor

oracle

Product

retail_financial_integration

Version

14.1.3

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2020-11979 2020-10-01 17h24 +00:00 As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
7.5
Haute
CVE-2020-5421 2020-09-19 03h45 +00:00 In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.
6.5
Moyen