Login Request a demo
RC
Product
Retail Customer Insights
by Oracle · last CVE Jul 11, 2022
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 2High 6Medium 4Low 0
Severity
All severities12Critical2High6Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Retail Customer Insights to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-1257
6.5
3%
May 11
Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a…
Affected: 15.0; 16.0
CVE-2015-9251
6.1
30%
Jan 18
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript…
Affected: 15.0; 16.0
CVE-2018-11039
5.9
3%
Jun 25
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any…
Affected: 15.0; 16.0
CVE-2018-1271
5.9
34%
Apr 6
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources…
Affected: 15.0; 16.0
Showing 4