RC
Product
Retail Central Office
On CISA KEVExploited in the wild
16
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 7Low 0
Watch
Add Retail Central Office to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-13990 | 9.8 | Jul 26 | initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description Affected: 14.1 |
| CVE-2018-8013 | 9.8 | May 24 | In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the… Affected: 14.1 |
| CVE-2018-1270 | 9.8 | Apr 6 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a… Affected: 14.0; 14.1 |
Showing 3